CVE-2023-21164: Use After Free
In DevmemIntMapPMR of devicememserver.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-21164?
The severity of CVE-2023-21164 is considered high.
How does CVE-2023-21164 affect Google Android?
CVE-2023-21164 allows for elevation of privilege on Google Android devices.
Is there a fix available for CVE-2023-21164?
Yes, you can refer to the following link for information on the available fix: [Android Security Bulletin - December 2023](https://source.android.com/security/bulletin/2023-12-01)
Are there any additional references related to CVE-2023-21164?
Yes, you can find more information about CVE-2023-21164 in the [Android Security Bulletin - December 2023](https://source.android.com/docs/security/bulletin/2023-12-01/#asterisk) and [Android Security Bulletin - December 2023](https://source.android.com/docs/security/bulletin/2023-12-01).