CVE-2023-20911

2023-03-2400:00:00

google_android

www.cve.org

privilege escalation

resource exhaustion

android-11

android-12

android-12l

android-13

0.0004 Low

EPSS

Percentile

5.1%

JSON

In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242537498

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2023-03-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-20911