CVE-2023-20994

In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118

• CWE-787

• https://source.android.com/security/bulletin/pixel/2023-03-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2023-03-01Patch, Vendor Advisory

Published

Mar 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20989In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, ther…4.4
• CVE-2023-2099A vulnerability classified as problematic has been found in …6.1
• CVE-2023-20990In btm_ble_rand_enc_complete of btm_ble.cc, there is a possi…4.4
• CVE-2023-20991In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner…4.4
• CVE-2023-20992In on_iso_link_quality_read of btm_iso_impl.h, there is a po…4.5
• CVE-2023-20993In multiple functions of SnoozeHelper.java, there is a possi…7.8
• CVE-2023-20995In captureImage of CustomizedSensor.cpp, there is a possible…7.8
• CVE-2023-20996In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20997In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20998In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-20999In multiple locations, there is a possible way to trigger a …5.5
• CVE-2023-2100A vulnerability classified as problematic was found in Sourc…6.1