CVE-2023-20945
published 2023-02-28CVE-2023-20945: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.17%
7.1th percentile
In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-246932269
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| atlassian | confluence_data_center | — | — |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | packages_apps_nfc | >= 10:0 < 10:2023-02-01 | 10:2023-02-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w9pg-xwfx-g62v: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd
ghsa_unreviewed·2023-02-28
CVE-2023-20945 [HIGH] CWE-787 GHSA-w9pg-xwfx-g62v: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd
In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-246932269
OSV
CVE-2023-20945: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd
osv·2023-02-01
CVE-2023-20945 CVE-2023-20945: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd
In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Atlassian
CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945
vendor_atlassian·2024-07-16·CVSS 7.4
CVE-2023-22025 [LOW] CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945
CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945
CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945 CVE-2024-20952 CVE-2024-21011 CVE-2024-21012 CVE-2024-21068 CVE-2024-21085 CVE-2024-21094
CVE: CVE-2023-22025
Affected products: Confluence Data Center
Android
CVE-2023-20945: Android Security Bulletin 2023-02-01
CVE: CVE-2023-20945
Severity: HIGH
Type: EoP
Affected AOSP versions: 10
References: A-246932269
vendor_android·2023-02-01·CVSS 7.8
CVE-2023-20945 [HIGH] CVE-2023-20945: Android Security Bulletin 2023-02-01
CVE: CVE-2023-20945
Severity: HIGH
Type: EoP
Affected AOSP versions: 10
References: A-246932269
Android Security Bulletin 2023-02-01
CVE: CVE-2023-20945
Severity: HIGH
Type: EoP
Affected AOSP versions: 10
References: A-246932269
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-28
Published