CVE-2023-40100: Use After Free
In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40100?
CVE-2023-40100 is classified as a medium severity vulnerability due to potential memory corruption leading to local privilege escalation.
How do I fix CVE-2023-40100?
To mitigate CVE-2023-40100, it is recommended to update your Android device to the latest security patch provided by Google.
What versions of Android are affected by CVE-2023-40100?
CVE-2023-40100 affects Android versions 11.0 through 14.0.
Is user interaction required to exploit CVE-2023-40100?
No, user interaction is not needed for the exploitation of CVE-2023-40100.
What kind of exploitation is possible with CVE-2023-40100?
CVE-2023-40100 can lead to local escalation of privilege without any additional execution privileges needed.