CVE-2023-20734

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Jun 6, 2023
Updated: Jan 8, 2025
CWE ID 787

Summary

CVE-2023-20734 is a vulnerability affecting the vcu software. This issue involves a missing bounds check leading to a possible out-of-bounds write. The consequence of this vulnerability is a local privilege escalation, granting System execution privileges to an attacker. No user interaction is required for exploitation. The patch for this issue is identified as ALPS07645149, and the internal issue reference is ALPS07645184.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Android

Affected Vendors

  • Google
  • Linux Foundation

Advisories, Assessments, and Mitigations