GSD-2023-20911 — Vulnetix

GSD-2023-20911 PUBLISHED CVSS 7.800000190734863 HIGH

In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242537498

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
n/a	Android	Android-11 Android-12 Android-12L Android-13

Timeline

Jul 18, 2022 CVE Published

References

https://source.android.com/security/bulletin/2023-03-01 url

Open in Interactive Console →