CVE-2023-20735
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jun 6, 2023
Updated: Jan 8, 2025
CWE ID 787
Summary
CVE-2023-20735 is a vulnerability affecting the vcu software, which involves a missing bounds check leading to an out-of-bounds write. This issue can result in local privilege escalation, enabling an attacker to gain System execution privileges without requiring user interaction. The vulnerability is identified by the issue ID ALPS07645178, and a patch with the ID ALPS07645149 is available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android
Affected Vendors
- Linux Foundation