CVE-2023-20932

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-248251018

• CWE-20
• CWE-20

• https://source.android.com/security/bulletin/2023-02-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2023-02-01Patch, Vendor Advisory

Published

Feb 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20927In permissions of AndroidManifest.xml, there is a possible w…7.8
• CVE-2023-20928In binder_vma_close of binder.c, there is a possible use aft…7.8
• CVE-2023-20929In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, t…5.5
• CVE-2023-2093A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-20930In pushDynamicShortcut of ShortcutPackage.java, there is a p…5.5
• CVE-2023-20931In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a pos…7.8
• CVE-2023-20933In several functions of MediaCodec.cpp, there is a possible …7.8
• CVE-2023-20934In resolveAttributionSource of ServiceUtilities.cpp, there i…7.8
• CVE-2023-20935In deserialize of multiple files, there is a possible out of…5.5
• CVE-2023-20936In bta_av_rc_disc_done of bta_av_act.cc, there is a possible…7.8
• CVE-2023-20937In several functions of the Android Linux kernel, there is a…7.8
• CVE-2023-20938In binder_transaction_buffer_release of binder.c, there is a…7.8