CVE-2023-21041

In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250123688References: N/A

Score
CVSS 3.1 7.8 High
Status
Modified - security@android.com
Published
2023-03-24
Last modified
2025-02-25
Weaknesses
CWE-787

Affected products

References