
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-20997 is a vulnerability discovered in Android 13 that involves a persistent reboot loop due to improper input validation in multiple locations. The vulnerability was disclosed in March 2023 and affects Android operating system version 13. This vulnerability requires user execution privileges but does not require user interaction for exploitation (NVD).
The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified under CWE-835 (Loop with Unreachable Exit Condition - 'Infinite Loop'). The technical nature of the vulnerability involves improper input validation that can trigger a persistent reboot loop (NVD).
When successfully exploited, this vulnerability can lead to a local denial of service condition. The impact is primarily on the availability of the affected system, as it can cause the device to enter a persistent reboot loop, making it temporarily unusable (NVD).
The vulnerability was addressed in the Android Security Bulletin for March 2023. Users should update their Android 13 devices to the latest available security patch level to mitigate this vulnerability (Android Security Bulletin).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."