CVE-2023-48345: Input Validation
Published Jan 18, 2024
·Updated
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Affected Software
15 affected components
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Jan 18, 2024
CVE Published
via MITRE·02:44 AM
Data Sourced
via MITRE·02:44 AM
Description
Data Sourced
via NVD·03:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48345?
CVE-2023-48345 is classified as a vulnerability that may lead to local denial of service due to an out of bounds read.
2
How do I fix CVE-2023-48345?
To fix CVE-2023-48345, you should apply the latest security patches provided by the affected software vendors for their respective products.
3
Which software versions are affected by CVE-2023-48345?
CVE-2023-48345 affects Google Android versions 11.0 and 12.0.
4
What causes the vulnerability in CVE-2023-48345?
The vulnerability in CVE-2023-48345 is caused by improper input validation in the video decoder.
5
Can CVE-2023-48345 be exploited remotely?
No, CVE-2023-48345 is a local denial of service vulnerability and cannot be exploited remotely.