CVE-2023-20963
HIGH KEVAndroid - Local Privilege Escalation via WorkSource Parcel Mismatch
Title source: llmExploitation Summary
CVE-2023-20963 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 13, 2023. EIP tracks 4 public exploits from researchers including pwnipc, black7024, GabrieleDattile.
AI-analyzed exploit summary This PoC exploits CVE-2023-20963, a vulnerability in Android's WorkSource parcel/unparcel logic, to bypass screen lock by manipulating Bundle data. It demonstrates a local privilege escalation by crafting malicious Parcel data to trigger unintended behavior in the Android framework.
Description
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
Exploits (4)
This PoC exploits CVE-2023-20963, a vulnerability in Android's WorkSource parcel/unparcel logic, to bypass screen lock by manipulating Bundle data. It demonstrates a local privilege escalation by crafting malicious Parcel data to trigger unintended behavior in the Android framework.
This repository contains a proof-of-concept exploit for CVE-2023-20963, a vulnerability in Android's WorkSource parcel/unparcel logic. The exploit demonstrates a screen lock bypass by manipulating parcel data to launch arbitrary activities.
The repository contains a functional PoC for CVE-2023-20963, demonstrating a WorkSource parcel/unparcel mismatch vulnerability in Android 11-13. The exploit leverages malformed parcel data to trigger arbitrary code execution or privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2023-20963, targeting Android's Autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating focus events and autofill responses.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H