CVE-2023-20620: google android

Vulnerability summary

CVE-2023-20620 is a medium (CVSS 4.1) vulnerability in google android. EPSS estimates a 0.07% chance of exploitation in the next 30 days, higher than 0% of scored vulnerabilities.

Timeline

1. 07-03-2023
   PublishedVulnerability first disclosed.
2. 06-03-2025
   Last modifiedVulnerability information updated.

Description

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558.

• CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionThe product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.