CVE-2023-20752: Medium severity android vulnerability
Published Jun 6, 2023
·Updated
In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826586; Issue ID: ALPS07826586.
Affected Software
18 affected components
All of the following
Any of the following
Google Android=12.0
Google Android=13.0
Any of the following
MediaTek Mt8167
MediaTek Mt8167s
MediaTek Mt8168
MediaTek Mt8175
MediaTek Mt8195
MediaTek Mt8362a
MediaTek Mt8365
Google Android=12.0
Google Android=13.0
MediaTek Mt8167
MediaTek Mt8167s
MediaTek Mt8168
MediaTek Mt8175
MediaTek Mt8195
MediaTek Mt8362a
MediaTek Mt8365
Event History
Jun 6, 2023
CVE Published
via MITRE·12:11 PM
Data Sourced
via MITRE·12:11 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-20752?
The severity of CVE-2023-20752 is medium with a CVSS score of 6.7.
2
How can CVE-2023-20752 be exploited?
CVE-2023-20752 can be exploited locally without requiring user interaction.
3
Which software versions are affected by CVE-2023-20752?
Google Android versions 12.0 and 13.0 are affected by CVE-2023-20752.
4
Is Mediatek Mt8167 vulnerable to CVE-2023-20752?
No, Mediatek Mt8167 is not vulnerable to CVE-2023-20752.
5
Where can I find more information about CVE-2023-20752?
More information about CVE-2023-20752 can be found at the Mediatek Product Security Bulletin for June 2023.