CVE-2023-20919

In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252663068

• CWE-693

• https://source.android.com/security/bulletin/2023-01-01Vendor Advisory
• https://source.android.com/security/bulletin/2023-01-01Vendor Advisory

Published

Jan 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20913In onCreate of PhoneAccountSettingsActivity.java and related…7.8
• CVE-2023-20914In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRes…5.5
• CVE-2023-20915In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, t…7.8
• CVE-2023-20916In getMainActivityLaunchIntent of LauncherAppsService.java, …7.8
• CVE-2023-20917In onTargetSelected of ResolverActivity.java, there is a pos…7.8
• CVE-2023-20918In getPendingIntentLaunchFlags of ActivityOptions.java, ther…9.8
• CVE-2023-2092A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-20920In queue of UsbRequest.java, there is a possible way to corr…7.8
• CVE-2023-20921In onPackageRemoved of AccessibilityManagerService.java, the…7.3
• CVE-2023-20922In setMimeGroup of PackageManagerService.java, there is a po…5.5
• CVE-2023-20923In exported content providers of ShannonRcs, there is a poss…5.5
• CVE-2023-20924In (TBD) of (TBD), there is a possible way to bypass the loc…6.8