CVE-2023-20963: Android Framework Privilege Escalation Vulnerability
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
Other sources
Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.
— CISA
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-20963?
CVE-2023-20963 is a privilege escalation vulnerability in the Android Framework.
How does CVE-2023-20963 affect Android Framework?
CVE-2023-20963 allows for privilege escalation in Android Framework when updating an app to a higher Target SDK with no additional execution privileges needed.
Who is affected by CVE-2023-20963?
Android Framework users are affected by CVE-2023-20963.
What can an attacker do with CVE-2023-20963?
An attacker can exploit CVE-2023-20963 to escalate privileges in Android Framework.
How can I protect myself from CVE-2023-20963?
To protect yourself from CVE-2023-20963, ensure you apply the latest security updates and patches provided by Android Framework.