CVE-2023-48425: Input Validation
U-Boot vulnerability resulting in persistent Code Execution
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48425?
CVE-2023-48425 is considered a critical vulnerability due to its potential for persistent code execution.
How do I fix CVE-2023-48425?
To mitigate CVE-2023-48425, ensure that your Google Android or Chromecast firmware is updated to the latest version beyond October 1, 2023.
Which devices are impacted by CVE-2023-48425?
CVE-2023-48425 affects certain versions of Google Android and Chromecast firmware prior to the October 1, 2023 update.
What are the potential risks associated with CVE-2023-48425?
Exploitation of CVE-2023-48425 may lead to unauthorized persistent code execution on affected devices.
Is CVE-2023-48425 being actively exploited?
As of the latest reports, there have been indications of CVE-2023-48425 being actively exploited in the wild.