CVE-2023-33880: Low severity Google Android vulnerability
Published Jul 12, 2023
·Updated
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected Software
34 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
Google Android=13.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Google Android=13.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Jul 12, 2023
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
Description
Data Sourced
09:15 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this missing permission check in the music service?
The vulnerability ID for this missing permission check in the music service is CVE-2023-33880.
2
How can this vulnerability in the music service lead to local information disclosure?
This vulnerability in the music service can lead to local information disclosure by allowing unauthorized access to sensitive data stored locally on the device.
3
Which versions of Android are affected by this vulnerability?
Android versions 10.0, 11.0, 12.0, and 13.0 are affected by this vulnerability.
4
What is the severity rating of this vulnerability?
This vulnerability has a severity rating of low.
5
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to install the latest security updates provided by the vendor.