CVE-2023-30688

Name of the Vulnerable Software and Affected Versions libsec-ril versions prior to SMR Aug-2023 Release 1

Description The issue is related to an out-of-bounds write in the MakeUiccAuthForOem function of libsec-ril, allowing a local attacker to execute arbitrary code.

Recommendations For versions prior to SMR Aug-2023 Release 1, update to the SMR Aug-2023 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the MakeUiccAuthForOem function until a patch is available.