CVE-2023-33904: Medium severity Google Android vulnerability
Published Jul 12, 2023
·Updated
In hciserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Affected Software
32 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Jul 12, 2023
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
Description
Data Sourced
09:15 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-33904?
CVE-2023-33904 is a vulnerability in hci_server that allows for a possible out of bounds read, leading to local denial of service with system execution privileges needed.
2
Which software versions are affected by CVE-2023-33904?
CVE-2023-33904 affects Google Android versions 10.0, 11.0, and 12.0.
3
What is the severity of CVE-2023-33904?
The severity of CVE-2023-33904 is medium with a severity value of 4.
4
How can I fix CVE-2023-33904?
To fix CVE-2023-33904, it is recommended to apply the latest security patches provided by the software vendor.
5
Where can I find more information about CVE-2023-33904?
You can find more information about CVE-2023-33904 at the following reference: [link](https://www.unisoc.com/en_us/secy/announcementDetail/1676902764208259073)