CVE-2023-21263

In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

History

22 Dec 2023, 01:15

Type Values Removed Values Added
Summary There is elevation of privilege. In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

07 Dec 2023, 19:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
CPE cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://source.android.com/security/bulletin/2023-12-01 - () https://source.android.com/security/bulletin/2023-12-01 - Vendor Advisory
First Time Google android
Google

05 Dec 2023, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-04 23:15

Updated : 2023-12-22 01:15


NVD link : CVE-2023-21263

Mitre link : CVE-2023-21263


JSON object : View

Products Affected

google

  • android