
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-33914 is a security vulnerability discovered in the NIA0 algorithm within the Security Mode Command. The vulnerability was disclosed and assigned a CVE ID on May 23, 2023. It affects multiple versions of Google Android (11.0, 12.0, 13.0) and various UNISOC chipsets including S8000, T760, T770, and T820 (NVD).
The vulnerability stems from a missing verification of incorrect input in the NIA0 algorithm within the Security Mode Command. It has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-20 (Improper Input Validation) (NVD).
If exploited, this vulnerability could lead to remote information disclosure without requiring additional execution privileges. The high confidentiality impact rating indicates that the vulnerability could allow unauthorized access to sensitive information (NVD).
The affected systems include Google Android versions 11.0, 12.0, and 13.0, as well as UNISOC chipsets S8000, T760, T770, and T820. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."