pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0595

CVE-2023-20944 (High) detected in baseandroid-10.0.0_r46

mend-bolt-for-github opened this issue · 3 comments

mend-bolt-for-github commented

CVE-2023-20944 - High Severity Vulnerability

Vulnerable Library - baseandroid-10.0.0_r46

Android framework classes and services

Library home page: https://android.googlesource.com/platform/frameworks/base

Found in base branch: master

Vulnerable Source Files (1)

/core/java/android/accounts/ChooseTypeAndAccountActivity.java

Vulnerability Details

In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-244154558

Publish Date: 2023-02-28

URL: CVE-2023-20944

CVSS 3 Score Details (7.8)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Local
    • Attack Complexity: Low
    • Privileges Required: Low
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: High
    • Integrity Impact: High
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Step up your Open Source Security Game with Mend here