CVE-2023-52341: Infoleak

Published Apr 8, 2024

Updated

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

Affected Software

6 affected components

All of the following

Any of the following

Google Android=12.0

Google Android=13.0

Any of the following

UNISOC S8000

UNISOC T760

UNISOC T770

UNISOC T820

Event History

Apr 8, 2024

CVE Published

via MITRE·02:21 AM

Data Sourced

via MITRE·02:21 AM

Description

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-52341?

CVE-2023-52341 is classified as a medium-severity vulnerability due to its potential for remote information disclosure.

How do I fix CVE-2023-52341?

To mitigate CVE-2023-52341, ensure that your affected devices are updated to the latest Android versions, 12.0 or 13.0, with security patches applied.

What causes CVE-2023-52341?

CVE-2023-52341 is caused by a missing permission check in the Plaintext COUNTER CHECK message before the activation of AS security.

Who is affected by CVE-2023-52341?

CVE-2023-52341 affects devices running Android versions 12.0 and 13.0.

What can be exploited in CVE-2023-52341?

CVE-2023-52341 can be exploited to disclose sensitive information without requiring additional execution privileges.