{"id":"CVE-2023-20924","state":"PUBLISHED","title":"In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the devi","description":"In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A","publishedAt":"2023-01-24T00:00:00.000Z","updatedAt":"2025-04-02T14:43:26.112Z","severity":{"score":6.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"google_android","products":["n/a Android"],"affected":[{"vendor":"n/a","product":"Android","versions":[{"version":"Android kernel","status":"affected"}]}],"references":["https://source.android.com/security/bulletin/pixel/2023-01-01"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/20xxx/CVE-2023-20924.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-20924","state":"PUBLISHED","datePublished":"2023-01-24T00:00:00.000Z","dateUpdated":"2025-04-02T14:43:26.112Z","assignerShortName":"google_android","assignerOrgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateReserved":"2022-11-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A"}],"affected":[{"vendor":"n/a","product":"Android","versions":[{"version":"Android kernel","status":"affected"}]}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-01-01"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Elevation of privilege"}]}],"providerMetadata":{"shortName":"google_android","orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateUpdated":"2023-01-24T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-01-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:21:33.545Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-02T14:42:49.303214Z","id":"CVE-2023-20924","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","type":"CWE","lang":"en","description":"CWE-287 Improper Authentication"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-02T14:43:26.112Z"}}]}}}