CVE-2023-40653: Medium severity android vulnerability

Published Oct 8, 2023

Updated

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed

Affected Software

28 affected components

All of the following

Google Android=11.0

Any of the following

UNISOC S8000

UNISOC Sc7731e

UNISOC Sc9832e

UNISOC Sc9863a

UNISOC T310

UNISOC T606

UNISOC T610

UNISOC T612

UNISOC T616

UNISOC T618

UNISOC T760

UNISOC T770

UNISOC T820

Google Android=11.0

UNISOC S8000

UNISOC Sc7731e

UNISOC Sc9832e

UNISOC Sc9863a

UNISOC T310

UNISOC T606

UNISOC T610

UNISOC T612

UNISOC T616

UNISOC T618

UNISOC T760

UNISOC T770

UNISOC T820

Event History

Oct 8, 2023

CVE Published

via MITRE·03:36 AM

Data Sourced

via MITRE·03:36 AM

Description

Frequently Asked Questions

What is CVE-2023-40653?

CVE-2023-40653 is a vulnerability in FW-PackageManager that allows for local escalation of privilege with System execution privileges needed.

What software is affected by CVE-2023-40653?

Google Android 11.0 is affected by CVE-2023-40653.

What is the severity of CVE-2023-40653?

The severity of CVE-2023-40653 is medium with a severity value of 6.7.

How can I fix CVE-2023-40653?

To fix CVE-2023-40653, it is recommended to follow the security recommendations provided by the software vendor or apply any available patches or updates.

Where can I find more information about CVE-2023-40653?

You can find more information about CVE-2023-40653 at the following link: [https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074](https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074)