CVE-2023-20766
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jul 4, 2023
Updated: Jul 10, 2023
CWE ID 787
Summary
CVE-2023-20766 is a vulnerability affecting the gps software. It involves a missing bounds check, leading to an out-of-bounds write condition. This issue can result in local privilege escalation, granting System execution privileges to an attacker. Notably, user interaction is not required for exploitation. The patch for this vulnerability is identified as ALPS07573237, and the related issue ID is ALPS07573202.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android