CVE-2023-21355: Use After Free
Published Oct 30, 2023
·Updated
In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Google Android=14.0
Event History
Oct 30, 2023
CVE Published
04:56 PM
Data Sourced
04:56 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-21355?
CVE-2023-21355 is a vulnerability in libaudioclient that could lead to local escalation of privilege without user interaction.
2
What is the severity of CVE-2023-21355?
The severity of CVE-2023-21355 is high with a CVSS score of 7.8.
3
How does the vulnerability in CVE-2023-21355 occur?
The vulnerability in CVE-2023-21355 occurs due to a use after free, leading to a possible out of bounds write.
4
Is user interaction required for exploitation of CVE-2023-21355?
No, user interaction is not needed for exploitation of CVE-2023-21355.
5
How can I fix the vulnerability in CVE-2023-21355?
To fix the vulnerability in CVE-2023-21355, it is recommended to apply the relevant security updates provided by the vendor.