CVE-2023-20993

In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261588851

• CWE-755
• CWE-755

• https://source.android.com/security/bulletin/2023-05-01
• https://source.android.com/security/bulletin/2023-05-01

Published

Mar 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20988In btm_read_rssi_complete of btm_acl.cc, there is a possible…4.5
• CVE-2023-20989In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, ther…4.4
• CVE-2023-2099A vulnerability classified as problematic has been found in …6.1
• CVE-2023-20990In btm_ble_rand_enc_complete of btm_ble.cc, there is a possi…4.4
• CVE-2023-20991In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner…4.4
• CVE-2023-20992In on_iso_link_quality_read of btm_iso_impl.h, there is a po…4.5
• CVE-2023-20994In _ufdt_output_property_to_fdt of ufdt_convert.c, there is …6.7
• CVE-2023-20995In captureImage of CustomizedSensor.cpp, there is a possible…7.8
• CVE-2023-20996In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20997In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20998In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20999In multiple locations, there is a possible way to trigger a …5.5