PT-2023-17811 · Google · Android

Publicado 2023-03-24 · Atualizado 2023-03-29 · CVE-2023-21020

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to a use after free in the registerSignalHandlers function of main.c, which could lead to local arbitrary code execution. This might result in local escalation of privilege, requiring System execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android version Android-13, apply the fix for the use after free issue in the registerSignalHandlers function of main.c to prevent local arbitrary code execution.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2023-21020

Produtos afetados

Android

Referências · 3

• https://source.android.com/security/bulletin/pixel/2023-03-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21020 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-21020 · Aviso do Fabricante