CVE-2023-42748: High severity android vulnerability

Published Dec 4, 2023

Updated

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

Affected Software

16 affected components

All of the following

Any of the following

Google Android=11.0

Google Android=12.0

Google Android=13.0

Any of the following

UNISOC S8000

UNISOC Sc7731e

UNISOC Sc9832e

UNISOC Sc9863a

UNISOC T310

UNISOC T606

UNISOC T610

UNISOC T612

UNISOC T616

UNISOC T618

UNISOC T760

UNISOC T770

UNISOC T820

Event History

Dec 4, 2023

CVE Published

12:54 AM

Data Sourced

12:54 AM

Description

Frequently Asked Questions

What is CVE-2023-42748?

CVE-2023-42748 is a vulnerability in the telecom service that allows local escalation of privilege without additional execution privileges needed.

How severe is CVE-2023-42748?

CVE-2023-42748 has a severity rating of 7.8, which is considered high.

Which software versions are affected by CVE-2023-42748?

CVE-2023-42748 affects Google Android versions 11.0, 12.0, and 13.0.

How can I fix CVE-2023-42748?

To fix CVE-2023-42748, it is recommended to apply the latest security patches provided by Google for the affected Android versions.

Where can I find more information about CVE-2023-42748?

You can find more information about CVE-2023-42748 at the following link: [https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049](https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049)