CVE-2023-20929

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-234442700

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-20939.8A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknowCVE-2023-209305.5In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This CVE-2023-209317.8In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to locaCVE-2023-209323.3In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input valCVE-2023-209337.8In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatiCVE-2023-209347.8In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissionCVE-2023-209355.5In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationCVE-2023-209367.8In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2023-209377.8In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to locaCVE-2023-209387.8In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to loCVE-2023-209397.8In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead toCVE-2023-20946.3A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affect
CVE-2023-20929: Medium severity, CVSS 5.5 | Vulnix