Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40140
HistoryOct 27, 2023 - 9:15 p.m.

Code injection

2023-10-2721:15:00
PRIOn knowledge base
www.prio-n.com
24
android
code injection
vulnerability
local privilege escalation
user interaction

0.0004 Low

EPSS

Percentile

5.1%

In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-40140