CVE-2023-40101

In collapse of canonicalizemd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40101

creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:45+00:00| seen| https://t.me/cibsecurity/73166...

CVE-2023-40101

CVE-2023-40101 describes an out-of-bounds read in the collapse path of canonicalize_md.c that can disclose local information without extra privileges or user interaction. Public records in multiple sources (NVD, Red Hat, CNVD, etc.) confirm the same description. The Android 14 release notes list ...