PT-2023-17811

CVE-2023-21020

·

Published

2023-03-24

·

Updated

2023-03-29

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-13
Description The issue is related to a use after free in the registerSignalHandlers function of main.c, which could lead to local arbitrary code execution. This might result in local escalation of privilege, requiring System execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android version Android-13, apply the fix for the use after free issue in the registerSignalHandlers function of main.c to prevent local arbitrary code execution.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾