CVE-2023-20906

Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-13

Description A permissions bypass issue in the PermissionManagerService.java allows for silent granting of a permission after a Target SDK update. This could lead to local escalation of privilege when an app is updated to a higher Target SDK, with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android versions Android-11 through Android-13, update to a version that includes the fix for this issue, as silently granting permissions can lead to security risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.