Lucene search
GoogleOSV:ASB-A-298057702HistoryDec 01, 2023 - 12:00 a.m.
use-after-free in libstagefright_httplive
2023-12-0100:00:00
Google
osv.dev
4
uaf
libstagefright_httplive
metadatabase
remote escalation
no user interaction
race condition
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| platform/frameworks/av | eq | 12L | |
| platform/frameworks/av | eq | 11 | |
| platform/frameworks/av | eq | 13 | |
| platform/frameworks/av | eq | 12 | |
| platform/frameworks/av | eq | 14 |
Related
prion
prion
Race condition
2023-12-04 23:15:00
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2024-07114)
2023-12-06 00:00:00
cvelist
cvelist
CVE-2023-40077
2023-12-04 22:40:50
cve
cve
CVE-2023-40077
2023-12-04 23:15:23
malwarebytes
malwarebytes
Android phones can be taken over remotely – update when you can
2023-12-07 12:07:42