CVE-2023-20827

CVSS 3.1 Score 6.4 of 10 (medium)

Details

Published Sep 4, 2023

Updated: Sep 7, 2023

CWE ID 362

Summary

CVE-2023-20826 is a vulnerability affecting the cta software where a missing permission check allows for potential information disclosure. This issue could result in local data exposure without requiring any additional execution privileges. Notably, user interaction is not necessary for an attacker to exploit this vulnerability. The patch ID for addressing this issue is ALPS07978550.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sjeXnO
https://www.cve.org/CVERecord?id=CVE-2023-20827
https://nvd.nist.gov/vuln/detail/CVE-2023-20827

Back to Vulnerability Database