CVE-2023-48344: Input Validation
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48344?
CVE-2023-48344 is a local denial of service vulnerability with high severity due to an out of bounds read in the video decoder.
How do I fix CVE-2023-48344?
To fix CVE-2023-48344, ensure that your affected Android software is updated to the latest security patch provided by Google.
What impact does CVE-2023-48344 have on affected devices?
CVE-2023-48344 can lead to a local denial of service, impacting the functionality of affected devices without requiring additional execution privileges.
Which versions of Android are affected by CVE-2023-48344?
CVE-2023-48344 affects Android versions 11.0 and 12.0.
Is CVE-2023-48344 a critical vulnerability?
While CVE-2023-48344 is not classified as critical, it poses significant risk due to the potential for local denial of service.