Vulnerabilities > CVE-2023-20664 - Use After Free vulnerability in Google Android

CVSS 6.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

google

CWE-416

NVD

Published: 2023-04-06

Updated: 2024-11-21

Summary

In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505952; Issue ID: ALPS07505952.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android 10.0 Google Android 11.0 Google Android 12.0 Google Android 13.0	4
Hardware	Mediatek Mediatek Mt6580 - Mediatek Mt6735 - Mediatek Mt6737 - Mediatek Mt6739 - Mediatek Mt6753 - Mediatek Mt6761 - Mediatek Mt6765 - Mediatek Mt6768 - Mediatek Mt6771 - Mediatek Mt6779 - Mediatek Mt6781 - Mediatek Mt6785 - Mediatek Mt6789 - Mediatek Mt6833 - Mediatek Mt6853 - Mediatek Mt6853T - Mediatek Mt6855 - Mediatek Mt6873 - Mediatek Mt6877 - Mediatek Mt6879 - Mediatek Mt6883 - Mediatek Mt6885 - Mediatek Mt6889 - Mediatek Mt6893 - Mediatek Mt6895 - Mediatek Mt6983 - Mediatek Mt8168 - Mediatek Mt8185 - Mediatek Mt8188 - Mediatek Mt8321 - Mediatek Mt8362A - Mediatek Mt8365 - Mediatek Mt8385 - Mediatek Mt8666 - Mediatek Mt8673 - Mediatek Mt8675 - Mediatek Mt8696 - Mediatek Mt8765 - Mediatek Mt8766 - Mediatek Mt8768 - Mediatek Mt8771 - Mediatek Mt8781 - Mediatek Mt8786 - Mediatek Mt8788 - Mediatek Mt8789 - Mediatek Mt8791 - Mediatek Mt8791T - Mediatek Mt8795T - Mediatek Mt8797 - Mediatek Mt8798 - Mediatek Mt8871 - Mediatek Mt8891 -	52

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References