PT-2023-17764 · Google · Android
CVE-2023-20976
·
Publicado
2023-03-24
·
Atualizado
2023-06-28
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Android versions Android-13
Description
The issue is related to improper input validation in the getConfirmationMessage function of DefaultAutofillPicker.java. This could potentially mislead the user into selecting a default autofill application, leading to a local escalation of privilege without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations
For Android version Android-13, update to a version that includes the fix for this issue, as referenced by Android ID A-216117246.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android