CVE-2023-35689

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*

History

21 Nov 2024, 08:08

Type Values Removed Values Added
References () https://source.android.com/security/bulletin/wear/2023-08-01 - Broken Link () https://source.android.com/security/bulletin/wear/2023-08-01 - Broken Link

Information

Published : 2023-08-14 22:15

Updated : 2024-11-21 08:08


NVD link : CVE-2023-35689

Mitre link : CVE-2023-35689

CVE.ORG link : CVE-2023-35689


JSON object : View

Products Affected

google

  • android
CWE
CWE-1188

Initialization of a Resource with an Insecure Default