Security Alert (A23-12-01): Multiple Vulnerabilities in Android


 

Published on: 05 December 2023

  
  

Description:

Google has released Android Security Bulletin December 2023 to fix multiple security vulnerabilities in Android operating system. The list of security updates can be found at:
https://source.android.com/docs/security/bulletin/2023-12-01

 

Affected Systems:

  • Android version 11, 12, 12L, 13 and 14

 

Impact:

Depending on the vulnerability exploited, a successful attack could lead to remote code execution, denial of service, elevation of privilege and information disclosure on an affected device.

 

Recommendation:

Some manufacturers have fixed or have planned to fix the vulnerabilities in their Android systems. Users are recommended to consult the product vendors to confirm the availability of patches. If patches are available, users should upgrade to the fixed versions or follow the recommendations provided by the product vendors to mitigate the risk.

 

More Information:

  • https://source.android.com/docs/security/bulletin/2023-12-01
  • https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20231205
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22076
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40507
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48454 (to CVE-2022-48459)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48461
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3889
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4272
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21162 (to CVE-2023-21164)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21166
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21215 (to CVE-2023-21218)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21227 (to CVE-2023-21228)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21263
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21267
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21394
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21401 (to CVE-2023-21403)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21652
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21662
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21664
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28546
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28550 (to CVE-2023-28551)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28585 (to CVE-2023-28588)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32804
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32818
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32847 (to CVE-2023-32848)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32850 (to CVE-2023-32851)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33017 (to CVE-2023-33018)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33022
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33053 (to CVE-2023-33054)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33063
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33079 (to CVE-2023-33081)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33087 (to CVE-2023-33089)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33092
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33097 (to CVE-2023-33098)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33106 (to CVE-2023-33107)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35668
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40073 (to CVE-2023-40084)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40087 (to CVE-2023-40092)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40094 (to CVE-2023-40098)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40103
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45773 (to CVE-2023-45777)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45779
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45781
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866


Tag: Android
Tags