CVEvulnerability
CVE-2023-21218
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-12-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android
References
- https://source.android.com/security/bulletin/2023-12-01 Vendor Advisory
- https://source.android.com/security/bulletin/2023-12-01 Vendor Advisory