CVE-2023-38459: High severity android vulnerability

Published Sep 4, 2023

Updated

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges

Affected Software

9 affected components

Google Android=11.0

UNISOC Sc7731e

UNISOC Sc9832e

UNISOC Sc9863a

UNISOC T606

UNISOC T610

UNISOC T612

UNISOC T616

UNISOC T618

Event History

Sep 4, 2023

CVE Published

via MITRE·01:16 AM

Data Sourced

via MITRE·01:16 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-38459?

The severity of CVE-2023-38459 is high with a CVSS score of 7.8.

What is the vulnerability of CVE-2023-38459?

The vulnerability in CVE-2023-38459 is a possible missing permission check in vowifiservice, which could lead to local escalation of privilege.

Which software versions are affected by CVE-2023-38459?

The Google Android software version 11.0 is affected by CVE-2023-38459.

How can I fix CVE-2023-38459?

To fix CVE-2023-38459, it is recommended to apply the latest security patches provided by the vendor.

Where can I find more information about CVE-2023-38459?

You can find more information about CVE-2023-38459 on the Unisoc security announcement page: [https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434](https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434)