CVE-2023-35690

2023-12-0422:40:49

google_android

www.cve.org

rgxdestroyhwrtdata

possible arbitrary code execution

local escalation of privilege

kernel

no user interaction

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

32.0%

JSON

In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "Android SoC",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/security/bulletin/2023-12-01