CVE-2023-20784
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Aug 7, 2023
Updated: Aug 9, 2023
CWE ID 787
Summary
CVE-2023-20784 is a vulnerability affecting the keyinstall software, where a missing bounds check leads to a possible out-of-bounds write. This issue could result in local privilege escalation, granting the attacker System execution privileges without requiring user interaction. To mitigate this risk, users are advised to install the patch with ID ALPS07826989 as soon as possible. Failure to address this vulnerability could leave systems susceptible to unauthorized system-level access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android