CVE-2023-20736
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 787
CWE ID 362
Summary
CVE-2023-20736 is a vulnerability affecting the vcu software. It involves a race condition leading to a possible out-of-bounds write. This issue, if exploited, could grant an attacker local privilege escalation with System execution privileges. Notably, user interaction is not necessary for exploitation. The patch for this vulnerability is identified as ALPS07645149, and the internal issue reference is ALPS07645189.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android
Affected Vendors
- Linux Foundation