CVE-2023-21228: Critical severity android vulnerability
Published Dec 4, 2023
·Updated
In PMRChangeSparseMemOSMem of physmemosmemlinux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
2 affected components
Google Android
Google Android
Event History
Dec 4, 2023
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-21228.
2
What is the severity of vulnerability CVE-2023-21228?
The severity of vulnerability CVE-2023-21228 is high with a severity value of 7.
3
What is the description of vulnerability CVE-2023-21228?
Vulnerability CVE-2023-21228 involves elevation of privilege.
4
Which software is affected by vulnerability CVE-2023-21228?
Vulnerability CVE-2023-21228 affects Google Android.
5
How can I fix vulnerability CVE-2023-21228?
To fix vulnerability CVE-2023-21228, refer to the official security bulletin provided by Google.