BadParcel

BadParcel Consulta Bundle Fengshui para una inmersión profunda en esta clase de errores. Este repositorio contiene un PoC para CVE-2023-20963, que es una discrepancia en la lógica de parcel/unparcel de Android WorkSource. La vulnerabilidad está parcheada en el Security Bulletin de Android de marz...

frameworks_base_AOSP10_r33_CVE-2023-20963

Dieses Repository hat keine README-Datei...

CVE-2023-20963

creationtimestamp| type| source ---|---|--- 2023-03-24 23:47:39+00:00| seen| https://t.me/cibsecurity/60683 2023-06-03 04:34:41+00:00| exploited| Telegram/r9pSH-zaZzJ85yrAwBqJG-jTD9RHKE8OIhFvQLWl5Z4 2023-06-10 08:57:29+00:00| exploited| https://t.me/androidMalware/1912 2023-06-12 11:13:38+00:00|...

CVE-2023-20963

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519...

CVE-2023-20963

CVE-2023-20963 affects Android WorkSource: a parcel/unparcel mismatch can enable local privilege escalation with no additional execution privileges required. Affected versions include Android 11–13 (11, 12, 12L, 13); patch information is in the March 2023 Android Security Bulletin, with mitigatio...