CVE-2023-38449: High severity android vulnerability
Published Sep 4, 2023
·Updated
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected Software
9 affected components
Google Android=11.0
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
Event History
Sep 4, 2023
CVE Published
via MITRE·01:16 AM
Data Sourced
via MITRE·01:16 AM
Description
Frequently Asked Questions
1
What is CVE-2023-38449?
CVE-2023-38449 is a vulnerability in vowifiservice that allows for local escalation of privilege without additional execution privileges.
2
What is the severity of CVE-2023-38449?
The severity of CVE-2023-38449 is high, with a severity value of 7.8.
3
Which software is affected by CVE-2023-38449?
The following software versions are affected by CVE-2023-38449: Google Android 11.0.
4
How can I fix CVE-2023-38449?
There is no known fix for CVE-2023-38449 at the moment. It is recommended to follow the advisory provided by the vendor.
5
Where can I find more information about CVE-2023-38449?
You can find more information about CVE-2023-38449 in the following advisory: [link](https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434)