CVEvulnerability
CVE-2023-35690
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-12-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android
References
- https://source.android.com/security/bulletin/2023-12-01 Vendor Advisory
- https://source.android.com/security/bulletin/2023-12-01 Vendor Advisory