PT-2023-17811 · Google · Android

Published 2023-03-24 · Updated 2023-03-29 · CVE-2023-21020

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to a use after free in the registerSignalHandlers function of main.c, which could lead to local arbitrary code execution. This might result in local escalation of privilege, requiring System execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android version Android-13, apply the fix for the use after free issue in the registerSignalHandlers function of main.c to prevent local arbitrary code execution.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-21020

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/pixel/2023-03-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21020 · Security Note
• https://osv.dev/vulnerability/CVE-2023-21020 · Vendor Advisory