6.8
Medium
CVE-2023-20926 In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due…
Description
In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-253043058
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
Other CVEs of Android
The 2441 CVEs of Android →
CVE-2023-21236
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check
Not rated
CVE-2023-21191
In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to…
Not rated
CVE-2023-21198
In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check
Not rated
CVE-2023-21202
In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing…
Not rated