CVE-2023-20932

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-248251018

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13

References

Timeline

Published
Feb 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209337.8In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatiCVE-2023-209347.8In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissionCVE-2023-209355.5In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationCVE-2023-209367.8In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2023-209377.8In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to locaCVE-2023-209387.8In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to loCVE-2023-209397.8In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead toCVE-2023-20946.3A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affectCVE-2023-209407.8In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to localCVE-2023-209416.6In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to phyCVE-2023-209425.5In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a CVE-2023-209437.8In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. Th
CVE-2023-20932: Low severity, CVSS 3.3 | Vulnix