PT-2023-30843

CVE-2023-48423

·

Published

2023-12-08

·

Updated

2024-03-12

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Android (affected versions not specified)
Description The issue is related to a missing bounds check in the dhcp4 SetPDNAddress function of dhcp4 Main.c, which could lead to a possible out of bounds write. This could result in remote code execution with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾