CVE-2023-20789

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Aug 7, 2023

Updated: Aug 9, 2023

Summary

CVE-2023-20789 is a newly disclosed cybersecurity vulnerability affecting jpeg files. This issue arises due to a missing bounds check, which could potentially enable an attacker to disclose local information. With System execution privileges required, this vulnerability poses a significant risk. Notably, user interaction is not necessary for exploitation. The patch ID and issue ID for addressing this issue are ALPS07693193.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sP3oWx
https://www.cve.org/CVERecord?id=CVE-2023-20789
https://nvd.nist.gov/vuln/detail/CVE-2023-20789

Back to Vulnerability Database