CVEvulnerability
CVE-2023-21282
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected configurations
• google android 11.0
• google android 12.0
• google android 12.1
• google android 13.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46 Patch
- https://source.android.com/security/bulletin/2023-08-01 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/08/13/9 www.openwall.com
- https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46 Patch
- https://source.android.com/security/bulletin/2023-08-01 Patch, Vendor Advisory