CVE-2024-0023

2024-02-1620:15:47

[email protected]

web.nvd.nist.gov

3500

cve-2024-0023

convertrgbtoplanaryuv

codec2bufferutils.cpp

out of bounds write

local escalation of privilege

nvd

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      },
      {
        "version": "13",
        "status": "affected"
      },
      {
        "version": "12L",
        "status": "affected"
      },
      {
        "version": "12",
        "status": "affected"
      },
      {
        "version": "11",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]