CVE-2023-20780

mediumpriority · track · 18EPSS 0.001 · 1 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.11% (1st) EPSS

CVSS 4.4 · medium

Is it mine?

65 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017756.

cvss

Technical severity, 0–10. One row per scoring source.

4.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 0.8 · impact 3.6

v3.14.4mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.14.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-200US

affected products (65)

Products and version ranges known to be affected.

Google Android 11all versionscert_bundDEcpe:/o:google:android:11
Google Android 12all versionscert_bundDEcpe:/o:google:android:12
Google Android 12Lall versionscert_bundDEcpe:/o:google:android:12l
Google Android 13all versionscert_bundDEcpe:/o:google:android:13
Samsung Android 13all versionscert_bundDEcpe:/o:samsung:android:13
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797≤ Android 11.0, 12.0, 13.0enisa_euvdEU
MediaTek Inc. MT6580all versionsfstec_bduRU
MediaTek Inc. MT6731all versionsfstec_bduRU
MediaTek Inc. MT6735all versionsfstec_bduRU
MediaTek Inc. MT6737all versionsfstec_bduRU
MediaTek Inc. MT6739all versionsfstec_bduRU
MediaTek Inc. MT6753all versionsfstec_bduRU
MediaTek Inc. MT6757all versionsfstec_bduRU
MediaTek Inc. MT6757Call versionsfstec_bduRU
MediaTek Inc. MT6757CDall versionsfstec_bduRU
MediaTek Inc. MT6757CHall versionsfstec_bduRU
MediaTek Inc. MT6761all versionsfstec_bduRU
MediaTek Inc. MT6762all versionsfstec_bduRU
MediaTek Inc. MT6763all versionsfstec_bduRU

showing 20 of 65

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-1984Google Android: Mehrere SchwachstellenDeutsch2023-08-07csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
WID-SEC-W-2023-2272Samsung Android: Mehrere SchwachstellenDeutsch2023-09-05csaf · cert_bundDE
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um Dateien zu manipulieren, seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und beliebigen Code auszuführen.
ASB-A-2856863532023-08-01vendor · osvUS

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund NVD CVE.org MITRE

published 2023-08-07modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan