VYPR
← All advisories
High severity7.3NVD Advisory· Published Mar 24, 2023· Updated Jun 17, 2026

CVE-2023-20976

CVE-2023-20976

Description

In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216117246

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Google/Android2 versions
    cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
    • (no CPE)range: Android-13
  • Google/Android SDKcpe-rescue

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.