CVE-2023-20940

In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256237041

• CWE-347
• CWE-347

• https://source.android.com/security/bulletin/2023-02-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2023-02-01Patch, Vendor Advisory

Published

Feb 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20935In deserialize of multiple files, there is a possible out of…5.5
• CVE-2023-20936In bta_av_rc_disc_done of bta_av_act.cc, there is a possible…7.8
• CVE-2023-20937In several functions of the Android Linux kernel, there is a…7.8
• CVE-2023-20938In binder_transaction_buffer_release of binder.c, there is a…7.8
• CVE-2023-20939In multiple functions of looper_backed_event_loop.cpp, there…7.8
• CVE-2023-2094A vulnerability has been found in SourceCodester Vehicle Ser…6.3
• CVE-2023-20941In acc_ctrlrequest_composite of f_accessory.c, there is a po…6.6
• CVE-2023-20942In openMmapStream of AudioFlinger.cpp, there is a possible w…5.5
• CVE-2023-20943In clearApplicationUserData of ActivityManagerService.java, …7.8
• CVE-2023-20944In run of ChooseTypeAndAccountActivity.java, there is a poss…7.8
• CVE-2023-20945In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp,…7.8
• CVE-2023-20946In onStart of BluetoothSwitchPreferenceController.java, ther…9.8