Skip to content
3.3 Low

CVE-2023-20932 In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due…

Description

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-248251018

Affected products and versions

Product Affected versions Fixed in
Android Versions not published
The 2441 CVEs of Android →
Track this CVE