PT-2023-17858 · Google · Android Kernel

CVE-2023-21066

·

Publicado

2023-06-28

·

Atualizado

2023-06-30

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a heap buffer overflow in the cd CodeMsg function of cd codec.c, which could lead to remote code execution without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android kernel, apply the necessary patch to fix the heap buffer overflow issue in the cd CodeMsg function of cd codec.c to prevent remote code execution.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-21066

Produtos afetados

Android Kernel