CVE-2023-48424: Critical severity Google Chromecast Firmware vulnerability
U-Boot shell vulnerability resulting in Privilege escalation in a production device
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48424?
CVE-2023-48424 has been classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2023-48424?
To mitigate CVE-2023-48424, update your device to the latest firmware version that addresses this vulnerability.
Which devices are affected by CVE-2023-48424?
CVE-2023-48424 affects devices running specific versions of Google Chromecast firmware prior to the 2023-10-01 update.
What can happen if CVE-2023-48424 is exploited?
If exploited, CVE-2023-48424 can allow attackers to escalate privileges on affected devices, potentially leading to unauthorized access.
Is there a workaround for CVE-2023-48424?
Currently, the recommended course of action for CVE-2023-48424 is to apply the firmware updates rather than relying on workarounds.