CVE-2023-48358: Medium severity Google Android vulnerability
Published Jan 18, 2024
·Updated
In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected Software
16 affected components
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Google Android=13.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Jan 18, 2024
CVE Published
via MITRE·02:44 AM
Data Sourced
via MITRE·02:44 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-48358?
CVE-2023-48358 is classified as a denial of service vulnerability due to a missing bounds check.
2
How do I fix CVE-2023-48358?
To fix CVE-2023-48358, ensure that your system has the latest security patches from the manufacturer.
3
What specific software versions are affected by CVE-2023-48358?
CVE-2023-48358 affects Google Android versions 11.0, 12.0, and 13.0.
4
What are the potential impacts of CVE-2023-48358?
The potential impact of CVE-2023-48358 includes local denial of service that may disrupt system operations.
5
Who is responsible for addressing CVE-2023-48358?
Device manufacturers, particularly those running affected versions of Google Android, are responsible for addressing CVE-2023-48358.