V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
CVE-2023-20953
CVE
High

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being sho…

CVSS
7.8
High
EPSS
0.00
p2
Published
2023-01-01
Updated
2023-01-01
Description

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251778420

Affected products
Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-framework-23Android-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-baseAndroid-platform-frameworks-base
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
2023-01-01
Published
2023-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: R
Required (R)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.001 · p2
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Canonical
Android-platform-frameworks-baseAndroid-framework-23
Google
Android
ProductVendorStatus
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-framework-23Tracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
android-platform-frameworks-baseTracked
Showing first 20 of 21
Source databases
CVE
UBU