CVE-2023-42706: Medium severity android vulnerability
Published Dec 4, 2023
·Updated
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
Affected Software
15 affected components
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Dec 4, 2023
CVE Published
12:54 AM
Data Sourced
12:54 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-42706.
2
What is the title of the vulnerability?
The title of the vulnerability is 'In firewall service there is a possible way to write permission usage records of an app due to a missing permission check.'
3
What is the severity of CVE-2023-42706?
The severity of CVE-2023-42706 is medium with a severity value of 5.5.
4
Which software versions are affected by CVE-2023-42706?
Google Android versions 11.0 and 12.0 are affected by CVE-2023-42706.
5
How can CVE-2023-42706 be fixed?
To fix CVE-2023-42706, it is recommended to apply the security patches provided by the vendor.