CVE-2023-21226

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jun 28, 2023
Updated: Jul 6, 2023
CWE ID 125

Summary

CVE-2023-21226 is a vulnerability affecting the Android kernel. In the function SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, an out-of-bounds read error occurs due to an incorrect bounds check. This issue allows for remote information disclosure without requiring additional execution privileges. Notably, user interaction is not necessary for an attacker to exploit this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share