CVEvulnerability
CVE-2023-21271
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-125
Description
In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android 12.0
• google android 12.1
• google android 13.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4 Patch
- https://source.android.com/security/bulletin/2023-08-01 Vendor Advisory
- https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4 Patch
- https://source.android.com/security/bulletin/2023-08-01 Vendor Advisory