CVE-2023-20746

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 667

Summary

CVE-2023-20746 is a vulnerability affecting the vcu software. This issue involves an out-of-bounds write event caused by insufficient locking mechanisms, leading to a local privilege escalation. System execution privileges are required for exploitation, and user interaction is not necessary for the attack to be carried out. The vulnerability has been assigned the patch ID ALPS07519142 and the issue ID ALPS07519217. This flaw poses a significant risk to systems utilizing the vcu software and underlines the importance of applying the available patch promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Android

Affected Vendors

  • Google
  • Linux Foundation