CVE-2023-20755: Integer Overflow
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-01-05 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-07-05 - Upgrade
Upgrade
keyinstallto a version that resolves this vulnerability.Patch ALPS07510064
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20755?
The severity of CVE-2023-20755 is high with a CVSS score of 6.7.
How does CVE-2023-20755 affect Google Android?
CVE-2023-20755 affects Google Android versions 11.0, 12.0, and 13.0.
Is Mediatek Mt6580 vulnerable to CVE-2023-20755?
No, Mediatek Mt6580 is not vulnerable to CVE-2023-20755.
What is the patch ID for CVE-2023-20755?
The patch ID for CVE-2023-20755 is ALPS07510064.
Where can I find more information about CVE-2023-20755?
You can find more information about CVE-2023-20755 at the following references: [link](https://source.android.com/docs/security/bulletin/2023-07-01/#asterisk), [link](https://source.android.com/docs/security/bulletin/2023-07-01), [link](https://corp.mediatek.com/product-security-bulletin/July-2023).