CVE-2023-20698: Medium severity Google Android vulnerability
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589144; Issue ID: ALPS07589144.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-05-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07589144
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-20698.
What is the severity of CVE-2023-20698?
The severity of CVE-2023-20698 is high with a severity value of 4.4.
What is the affected software for CVE-2023-20698?
The affected software for CVE-2023-20698 includes Google Android versions 11.0, 12.0, and 13.0.
Is user interaction needed for exploitation of CVE-2023-20698?
No, user interaction is not needed for exploitation of CVE-2023-20698.
How can I fix CVE-2023-20698?
To fix CVE-2023-20698, apply the patch with Patch ID: ALPS07589144. Check the references for more information.