CVE-2023-35674: Android Framework Privilege Escalation Vulnerability
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
Other sources
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Discontinue use of the affected product (Android / Google Android Framework) if vendor mitigations are unavailable.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-35674?
CVE-2023-35674 is an Android Framework Privilege Escalation Vulnerability.
What is the severity of CVE-2023-35674?
CVE-2023-35674 has a severity level of high.
How does CVE-2023-35674 impact Android devices?
CVE-2023-35674 allows for local escalation of privilege on affected Android devices.
What is the affected software?
The affected software includes Google Android versions 11.0, 12.0, 12.1, and 13.0.
How can I fix CVE-2023-35674?
To fix CVE-2023-35674, users should apply the necessary security updates provided by Google for their Android devices.