Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-20904

Good to know:

icon

Date: January 26, 2023

In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-246300272

Language: Java

Severity Score

Related Resources (5)

https://www.cve.org/CVERecord?id=CVE-2023-20904
https://nvd.nist.gov/vuln/detail/CVE-2023-20904
https://source.android.com/security/bulletin/2023-01-01
https://android.googlesource.com/platform/packages/apps/Settings/+/0d461c5bedc547bf4e42c5034ce7d04f51cedf54
https://www.mend.io/vulnerability-database/CVE-2023-20904

Severity Score

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version android-13.0.0_r19

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us