CVE-2023-35664

CVSS 3.1 Score 5.5 of 10 (medium)

Attack Complexity low

Confidentiality high

Privileges Required low

Integrity none

Availability none

Scope unchanged

Details

Published Sep 11, 2023

Updated: Sep 14, 2023

CWE ID 125

Summary

CVE-2023-35664 is a newly identified vulnerability that affects the ShimConverter.cpp file in a specific software component. The issue lies within the "convertSubgraphFromHAL" function, where a missing bounds check can lead to a possible out-of-bounds read. This vulnerability can result in local information disclosure without requiring additional execution privileges or user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/skmcOR
https://www.cve.org/CVERecord?id=CVE-2023-35664
https://nvd.nist.gov/vuln/detail/CVE-2023-35664

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Submarine Cables Face Increasing Threats Amid Geopolitical Tensions and Limited Repair Capacity

US Violent Extremists Likely Shifting Focus to Targeted Physical Threats in 2025

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Know What Matters

For Customers

For Partners