High severity7.8NVD Advisory· Published Dec 4, 2023· Updated Jun 17, 2026
CVE-2023-45779
CVE-2023-45779
Description
In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this can be found in the referenced links.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
4- source.android.com/security/bulletin/2023-12-01nvdVendor Advisory
- github.com/metaredteam/external-disclosures/security/advisories/GHSA-wmcc-g67r-9962nvd
- rtx.meta.security/exploitation/2024/01/30/Android-vendors-APEX-test-keys.htmlnvd
- www.fairphone.com/en/2024/01/30/security-update-apex-modules-vulnerability-fixed/nvd
News mentions
0No linked articles in our index yet.