pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0595

CVE-2023-20996 (Medium) detected in multiple libraries

mend-bolt-for-github opened this issue · 3 comments

mend-bolt-for-github commented

CVE-2023-20996 - Medium Severity Vulnerability

Vulnerable Libraries - baseandroid-10.0.0_r46, baseandroid-10.0.0_r46, baseandroid-10.0.0_r46

Vulnerability Details

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749764

Publish Date: 2023-03-24

URL: CVE-2023-20996

CVSS 3 Score Details (5.5)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Local
    • Attack Complexity: Low
    • Privileges Required: Low
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: None
    • Integrity Impact: None
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9

Release Date: 2023-03-24

Fix Resolution: android-13.0.0_r32

Step up your Open Source Security Game with Mend here