Lucene search
Google_androidCVELIST:CVE-2023-20920HistoryJan 24, 2023 - 12:00 a.m.
CVE-2023-20920
2023-01-2400:00:00
google_android
www.cve.org
usbrequest.java
memory corruption
local escalation
0.0004 Low
EPSS
Percentile
5.1%
In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-204584366
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-20920
2023-01-26 21:18:11
cnvd
cnvd
cve
cve
CVE-2023-20920
2023-01-26 21:18:11
prion
prion
Memory corruption
2023-01-26 21:18:00
osv
osv
[HWASan] Use after free in libusbhost.so
2023-01-01 00:00:00