CVE-2023-52342: High severity android vulnerability
Published Apr 8, 2024
·Updated
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
Affected Software
7 affected components
All of the following
Any of the following
Google Android=12.0
Google Android=13.0
Google Android=14.0
Any of the following
UNISOC S8000
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Apr 8, 2024
CVE Published
via MITRE·02:21 AM
Data Sourced
via MITRE·02:21 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52342?
CVE-2023-52342 has a severity rating that indicates potential for information disclosure without requiring additional execution privileges.
2
How do I fix CVE-2023-52342?
To fix CVE-2023-52342, update the affected Android versions 12.0, 13.0, or 14.0 to the latest patch provided by the manufacturer.
3
What causes CVE-2023-52342?
CVE-2023-52342 is caused by incorrect error handling in modem-ps-nas-ngmm, leading to undefined behavior.
4
Which devices are affected by CVE-2023-52342?
CVE-2023-52342 affects devices running Android versions 12.0, 13.0, and 14.0.
5
Can CVE-2023-52342 be exploited remotely?
Yes, CVE-2023-52342 can potentially be exploited remotely to disclose information.