CVE-2023-20970

CVE-2023-20970 is a confirmed Android 13 vulnerability affecting p2p_iface.cpp with an out-of-bounds read caused by a missing bounds check. Exploitation is described as a local information disclosure vulnerability requiring high privileges and no user interaction. Multiple connected records (RH, ...

CVE-2023-20970

In multiple locations of p2piface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...