← Back

CVE-2023-52343

nvd nist
Published: Apr 8, 2024Modified: May 6, 2025

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L
Exploitability: 0.7 / Impact: 4.7
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed

Affected (3)

Products: Google: Android
Google
1 product
Android
Configuration A
3 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Google
Android
Version 12.0
Android
Version 13.0
Android
Version 14.0
Running on/withPlatform Versions
Unisoc
S8000
All versions
Unisoc
T760
All versions
Unisoc
T770
All versions
Unisoc
T820
All versions

Related CWEs

CWE-1284
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (2)

Source: security@unisoc.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.