CVE-2023-32851: High severity Google Android vulnerability
In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-12-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS08016652
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-32851.
What is the severity level of CVE-2023-32851?
The severity level of CVE-2023-32851 is high.
How does CVE-2023-32851 occur?
CVE-2023-32851 occurs due to a missing bounds check in the decoder, leading to a possible out of bounds write.
What is the potential impact of CVE-2023-32851?
CVE-2023-32851 could lead to local escalation of privilege with no additional execution privileges needed, but user interaction is required for exploitation.
Is there a patch available for CVE-2023-32851?
Yes, a patch is available for CVE-2023-32851. Patch ID: ALPS08016652; Issue ID: ALPS08016652.