PT-2023-18012 · Google · Android Kernel

CVE-2023-21226

·

Publicado

2023-06-28

·

Atualizado

2023-07-06

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to an incorrect bounds check in the SAEMM RetrieveTaiList function of SAEMM ContextManagement.c. This could lead to a possible out of bounds read, resulting in remote information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android kernel, consider applying a patch that fixes the incorrect bounds check in the SAEMM RetrieveTaiList function of SAEMM ContextManagement.c to prevent potential out of bounds read and remote information disclosure.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-21226

Produtos afetados

Android Kernel