resolv_service_fuzzer: Abrt in android::net::Experiments::getFlag

2023-11-0100:00:00

Google

osv.dev

discovery thread

local escalation

privilege

android

experiments

resolv service fuzzer

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/dnsresolvereq12L
platform/packages/modules/dnsresolvereq14
platform/packages/modules/dnsresolvereq13
platform/packages/modules/dnsresolvereq11
platform/packages/modules/dnsresolvereq12

Name	Operator	Version
platform/packages/modules/dnsresolver	eq	12L
platform/packages/modules/dnsresolver	eq	14
platform/packages/modules/dnsresolver	eq	13
platform/packages/modules/dnsresolver	eq	11
platform/packages/modules/dnsresolver	eq	12