CVE-2023-21361

In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

History

04 Nov 2023, 03:20

Type Values Removed Values Added
CPE cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
CWE CWE-416
References (MISC) https://source.android.com/docs/security/bulletin/android-14 - (MISC) https://source.android.com/docs/security/bulletin/android-14 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Google android
Google

30 Oct 2023, 17:20

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-30 17:15

Updated : 2023-11-04 03:20


NVD link : CVE-2023-21361

Mitre link : CVE-2023-21361


JSON object : View

Products Affected

google

  • android
CWE
CWE-416

Use After Free