First published: Fri Mar 24 2023(Updated: )
In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243129862References: N/A
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-21063 has a high severity rating due to its potential for local escalation of privilege.
To fix CVE-2023-21063, ensure that your Android device is updated to the latest security patch released by Google.
CVE-2023-21063 could lead to unauthorized access and privilege escalation on affected Android devices.
No, user interaction is not needed for the exploitation of CVE-2023-21063.
CVE-2023-21063 affects the Android kernel across various versions of Android.