Lucene search

K
cveGoogle_androidCVE-2023-40112
HistoryFeb 15, 2024 - 11:15 p.m.

CVE-2023-40112

2024-02-1523:15:08
google_android
web.nvd.nist.gov
5193
cve-2023-40112
ippsetvaluetag
ipp.c
out of bounds read
local information disclosure
nvd

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected configurations

Vulners
Node
googleandroidMatch11
VendorProductVersionCPE
googleandroid11cpe:2.3:o:google:android:11:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "11",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%