CVE-2023-20712

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 787

Summary

CVE-2023-20712 is a vulnerability affecting the wlan component, where a missing bounds check allows for an out-of-bounds write. This issue can result in local privilege escalation, granting the attacker System execution privileges without requiring user interaction. The vulnerability has been assigned the patch ID ALPS07796914 and issue ID ALPS07796914. This security flaw poses a significant risk and requires immediate attention, as it can be exploited without user involvement.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Android
  • Linux Kernel

Affected Vendors

  • Google
  • LINUX
  • Linux Foundation

Advisories, Assessments, and Mitigations