CVE-2023-21375
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 30, 2023
Updated: Nov 3, 2023
CWE ID 190
Summary
CVE-2023-21375 is a vulnerability affecting Sysproxy, where an integer underflow leads to a possible out-of-bounds write. This issue can result in local privilege escalation without requiring additional execution privileges or user interaction. Despite the name suggesting an input validation error, the root cause is an integer underflow condition within the software. Successful exploitation of this vulnerability can significantly impact system security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android