CVE-2023-20924

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209257.8In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to locaCVE-2023-209266.8In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permissiCVE-2023-209277.8In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead tCVE-2023-209287.8In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilegCVE-2023-209295.5In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted bCVE-2023-20939.8A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknowCVE-2023-209305.5In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This CVE-2023-209317.8In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to locaCVE-2023-209323.3In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input valCVE-2023-209337.8In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatiCVE-2023-209347.8In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissionCVE-2023-209355.5In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information
CVE-2023-20924: Medium severity, CVSS 6.8 | Vulnix