CVE-2023-20965: Critical severity android vulnerability
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20965?
CVE-2023-20965 is considered a high severity vulnerability that could lead to remote escalation of privilege.
How do I fix CVE-2023-20965?
To mitigate CVE-2023-20965, ensure that your Android device is updated to the latest security patch provided by Google.
What software is affected by CVE-2023-20965?
CVE-2023-20965 affects Android version 13.0 and potentially other versions as updates are released.
Can CVE-2023-20965 be exploited without user interaction?
Yes, CVE-2023-20965 can be exploited remotely without any user interaction required.
What could be the impact of exploiting CVE-2023-20965?
Exploitation of CVE-2023-20965 could result in unauthorized access to credentials, leading to privilege escalation.