CVE-2023-20746
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 667
Summary
CVE-2023-20746 is a vulnerability affecting the vcu software. This issue involves an out-of-bounds write event caused by insufficient locking mechanisms, leading to a local privilege escalation. System execution privileges are required for exploitation, and user interaction is not necessary for the attack to be carried out. The vulnerability has been assigned the patch ID ALPS07519142 and the issue ID ALPS07519217. This flaw poses a significant risk to systems utilizing the vcu software and underlines the importance of applying the available patch promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android
Affected Vendors
- Linux Foundation