CVE-2023-21227

2023-12-0422:40:48

google_android

www.cve.org

htblogkm

htbserver.c

information disclosure

kernel

local

exploitation

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON

In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "Android SoC",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/security/bulletin/2023-12-01