PT-2023-17951 · Google · Android Kernel
CVE-2023-21158
·
Publicado
2023-06-28
·
Atualizado
2023-07-05
CVSS v3.1
4.4
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a heap buffer overflow in the encode function of miscdata.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring System execution privileges for exploitation. Notably, user interaction is not necessary for this issue to be exploited.
Recommendations
For Android kernel, consider applying a patch to fix the heap buffer overflow issue in the encode function of miscdata.cpp to prevent potential information disclosure.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android Kernel