PT-2023-18708 · Arm · Arm Android Gralloc Module

CVE-2023-22808

·

Publicado

2023-04-11

·

Atualizado

2023-04-21

CVSS v3.1

3.3

Baixa

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Arm Android Gralloc Module versions r24p0 through r41p0 before r42p0
Description An issue was discovered in the Arm Android Gralloc Module, allowing a non-privileged user to read a small portion of the allocator process memory.
Recommendations For versions r24p0 through r41p0 before r42p0, update to version r42p0 or later to resolve the issue.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-22808

Produtos afetados

Arm Android Gralloc Module