CVE-2023-49794

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-49794

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49794.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-49794

Aliases

GHSA-8rc5-x54x-5qc4

Published

2024-01-02T19:58:56.152Z

Modified

2026-07-15T01:49:19.094809040Z

Severity

6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

The logic of get apk path in KernelSU module can be bypassed

Details

KernelSU is a Kernel-based root solution for Android devices. In versions 0.7.1 and prior, the logic of get apk path in KernelSU kernel module can be bypassed, which causes any malicious apk named me.weishu.kernelsu get root permission. If a KernelSU module installed device try to install any not checked apk which package name equal to the official KernelSU Manager, it can take over root privileges on the device. As of time of publication, a patched version is not available.

Database specific

{
    "cwe_ids": [
        "CWE-290"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49794.json"
}

References

Affected packages

Git / github.com/tiann/kernelsu

Affected ranges

Type

GIT

Repo

https://github.com/tiann/kernelsu

Events

Introduced

Last affected

0617c4440bfe80b386b068cfbc7091630e67d4a7

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:kernelsu:kernelsu:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.7.1"
        }
    ]
}

Affected versions

v0.*

v0.1.3

v0.3.0

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.3.9

v0.4.0

v0.4.1

v0.5.0

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.6.0

v0.6.1

v0.6.2

v0.6.6

v0.6.7

v0.6.8

v0.6.9

v0.7.0

v0.7.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49794.json"