PT-2023-17953 · Google · Android Kernel

CVE-2023-21160

·

Publicado

2023-06-28

·

Atualizado

2023-07-05

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a heap buffer overflow in the BuildSetTcsFci function of protocolmiscbuilder.cpp, which could lead to a possible out of bounds read. This may result in local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android kernel, apply the necessary patch or update to fix the heap buffer overflow issue in the BuildSetTcsFci function.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-21160

Produtos afetados

Android Kernel