CVE-2023-21381

2023-10-3017:01:36

google_android

www.cve.org

media resource manager

local arbitrary code execution

use after free

local privilege escalation

no user interaction

EPSS

Percentile

5.1%

JSON

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/docs/security/bulletin/android-14

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-21381