CVE-2023-42741: Medium severity android vulnerability

Published Dec 4, 2023

Updated

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

Affected Software

16 affected components

All of the following

Any of the following

Google Android=11.0

Google Android=12.0

Google Android=13.0

Any of the following

UNISOC S8000

UNISOC Sc7731e

UNISOC Sc9832e

UNISOC Sc9863a

UNISOC T310

UNISOC T606

UNISOC T610

UNISOC T612

UNISOC T616

UNISOC T618

UNISOC T760

UNISOC T770

UNISOC T820

Event History

Dec 4, 2023

CVE Published

12:54 AM

Data Sourced

12:54 AM

Description

Frequently Asked Questions

What is CVE-2023-42741?

CVE-2023-42741 is a vulnerability in telecom service that allows for a possible way to write permission usage records of an app due to a missing permission check, leading to local information disclosure.

Which software versions are affected by CVE-2023-42741?

The affected software versions include Google Android 11.0, 12.0, and 13.0.

What is the severity level of CVE-2023-42741?

CVE-2023-42741 has a severity level of medium with a score of 5.5.

How can I fix CVE-2023-42741?

To fix CVE-2023-42741, it is recommended to apply the necessary security patches provided by the software vendors.

Where can I find more information about CVE-2023-42741?

You can find more information about CVE-2023-42741 at the provided reference link: https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049