CVE-2023-35654

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Oct 11, 2023
Updated: Oct 14, 2023
CWE ID 125

Summary

CVE-2023-35654 is a vulnerability affecting the stmvl53l1\_module.c in the ctrl\_roi section. The issue stems from an incorrect bounds check, leading to a possible out-of-bounds read. Successful exploitation of this vulnerability could result in local privilege escalation, granting the attacker System execution privileges, without requiring user interaction.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share