CVE-2023-38451: High severity android vulnerability
Published Sep 4, 2023
·Updated
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected Software
9 affected components
Google Android=11.0
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
Event History
Sep 4, 2023
CVE Published
via MITRE·01:16 AM
Data Sourced
via MITRE·01:16 AM
Description
Frequently Asked Questions
1
What is CVE-2023-38451?
CVE-2023-38451 is a vulnerability in the vowifiservice component of the affected software that could allow local escalation of privilege without additional execution privileges.
2
What is the severity of CVE-2023-38451?
CVE-2023-38451 has a severity rating of 7.8 (high).
3
Which software versions are affected by CVE-2023-38451?
The Google Android version 11.0 is affected by CVE-2023-38451.
4
How can CVE-2023-38451 be exploited?
CVE-2023-38451 can be exploited locally by leveraging the missing permission check in vowifiservice component.
5
How can CVE-2023-38451 be fixed?
To fix CVE-2023-38451, users should apply the necessary security patches or updates provided by the software vendor.