CVE-2023-48348: Input Validation
In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48348?
CVE-2023-48348 has a severity rating that indicates a potential local denial of service vulnerability due to improper input validation in video decoding.
How do I fix CVE-2023-48348?
Fixing CVE-2023-48348 involves ensuring you apply the latest security updates and patches provided by your software vendor.
Which software is affected by CVE-2023-48348?
CVE-2023-48348 affects Google Android versions 11.0 and 12.0, among others related to Unisoc processors.
Can CVE-2023-48348 lead to remote attacks?
No, CVE-2023-48348 does not allow remote attacks; it requires local access to exploit.
What are the implications of CVE-2023-48348?
CVE-2023-48348 can cause system instability and denial of service, impacting application performance on affected devices.