Lucene search

K
nvd[email protected]NVD:CVE-2023-42731
HistoryDec 04, 2023 - 1:15 a.m.

CVE-2023-42731

2023-12-0401:15:11
CWE-125
web.nvd.nist.gov
1
gnss service
out of bounds read
local denial of service
denial of service
system execution privileges

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

Affected configurations

Nvd
Node
googleandroidMatch11.0
OR
googleandroidMatch12.0
OR
googleandroidMatch13.0
AND
unisoct606Match-
OR
unisoct612Match-
OR
unisoct616Match-
VendorProductVersionCPE
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
googleandroid13.0cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
unisoct606-cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*
unisoct612-cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*
unisoct616-cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-42731