CVE-2023-38456: High severity android vulnerability
Published Sep 4, 2023
·Updated
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected Software
9 affected components
Google Android=11.0
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
Event History
Sep 4, 2023
CVE Published
via MITRE·01:16 AM
Data Sourced
via MITRE·01:16 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-38456.
2
What is the title of the vulnerability?
The title of the vulnerability is 'In vowifiservice there is a possible missing permission check. This could lead to local escalation of privilege.'
3
What is the severity of CVE-2023-38456?
The severity of CVE-2023-38456 is high with a CVSS score of 7.8.
4
Which software is affected by CVE-2023-38456?
The following software is affected by CVE-2023-38456: Google Android 11.0.
5
How can this vulnerability be fixed?
A fix for CVE-2023-38456 may be provided by the vendor. Please refer to the vendor's official announcement for details.