CVE-2023-20956 | Google Android 12.0/13.0 C2SurfaceSyncObj.cpp Import out-of-bounds write (A-240140929 / EUVD-2023-25124)
A vulnerability identified as critical has been detected in Google Android 12.0/13.0. Affected by this vulnerability is the function Import of the file C2SurfaceSyncObj.cpp. The manipulation leads to out-of-bounds write.
This vulnerability is listed as CVE-2023-20956. The attack must be carried out locally. There is no available exploit.
To fix this issue, it is recommended to deploy a patch.