CVE-2023-38444: High severity android vulnerability
Published Sep 4, 2023
·Updated
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected Software
9 affected components
Google Android=11.0
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
Event History
Sep 4, 2023
CVE Published
via MITRE·01:16 AM
Data Sourced
via MITRE·01:16 AM
Description
Frequently Asked Questions
1
What is CVE-2023-38444?
CVE-2023-38444 is a vulnerability in the vowifiservice component of certain Android versions that could allow local escalation of privilege.
2
What is the severity of CVE-2023-38444?
The severity of CVE-2023-38444 is high with a CVSS score of 7.8.
3
Which software are affected by CVE-2023-38444?
Android 11.0 is affected by CVE-2023-38444.
4
How can CVE-2023-38444 be exploited?
CVE-2023-38444 can be exploited by a local attacker to escalate their privileges.
5
Is there a fix for CVE-2023-38444?
The fix for CVE-2023-38444 may be provided by the vendor or the software developer. Please refer to their official documentation or announcements for more information.