CVE-2023-40087: High severity android vulnerability
Published Dec 4, 2023
·Updated
In transcodeQToFloat of btifavrcpaudiotrack.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
6 affected components
Google Android
Google Android=11.0
Google Android=12.0
Google Android=12.1
Google Android=13.0
Google Android=14.0
Remediation
Patch Available
Event History
Dec 4, 2023
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-40087.
2
What is the severity of CVE-2023-40087?
The severity of CVE-2023-40087 is high with a severity value of 7.
3
Which software is affected by CVE-2023-40087?
The software affected by CVE-2023-40087 is Google Android.
4
What is the potential impact of CVE-2023-40087?
The potential impact of CVE-2023-40087 is an escalation of privilege for paired devices without requiring additional execution privileges.
5
Is user interaction required for exploitation of CVE-2023-40087?
No, user interaction is not needed for exploitation of CVE-2023-40087.