PT-2023-17709 · Google · Android
CVE-2023-20919
·
Publicado
2023-01-01
·
Atualizado
2023-02-01
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Android versions Android-13
Description
A logic error in the code of Settings.java could prevent package uninstallation, potentially leading to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android version Android-13, apply the fix for the logic error in Settings.java to prevent package uninstallation issues and potential privilege escalation.
Correção
Protection Mechanism Failure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android