AZL-26243 CVE-2023-21100 affecting package nodejs18 for versions less than 18.20.2-2

🗓️ 19 Apr 2023 20:15:12Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Nodejs18 on Android below 18.20.2-2 has heap overflow in inflate.c causing out-of-bounds write and privilege escalation.

Reporter	Title	Published	Views	Family All 16
Android Security Bulletins	Android Security Bulletin—April 2023Stay organized with collectionsSave and categorize content based on your preferences.	3 Apr 202300:00	–	androidsecurity
CBLMariner	CVE-2023-21100 affecting package nodejs18 for versions less than 18.20.2-2	12 Jun 202422:23	–	cbl_mariner
Circl	CVE-2023-21100	20 Apr 202300:36	–	circl
CNNVD	Google Android 缓冲区错误漏洞	19 Apr 202300:00	–	cnnvd
CNVD	Google Android inflate.c component buffer overflow vulnerability	23 Apr 202300:00	–	cnvd
CVE	CVE-2023-21100	19 Apr 202300:00	–	cve
Cvelist	CVE-2023-21100	19 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-25268	3 Oct 202520:07	–	euvd
Microsoft CVE	In inflate of inflate.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249	24 Apr 202307:00	–	mscve
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	4 Apr 202300:00	–	ncsc