CVE-2023-48340: Input Validation
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48340?
CVE-2023-48340 is classified as a moderate severity vulnerability that can lead to local denial of service.
How do I fix CVE-2023-48340?
To fix CVE-2023-48340, you should update your affected Android device to the latest security patch.
What causes CVE-2023-48340?
CVE-2023-48340 is caused by improper input validation in the video decoder, which can result in an out of bounds write.
Is CVE-2023-48340 related to specific Android versions?
Yes, CVE-2023-48340 affects Android versions 11.0 and 12.0.
Who is affected by CVE-2023-48340?
CVE-2023-48340 affects devices running the vulnerable versions of Android, particularly those with certain video decoding capabilities.