CVE-2023-21085

CVE-2023-21085 involves Android’s System component where a missing bounds check in function nci_snd_set_routing_cmd (in file nci_hmsgs.cc ) can cause an out-of-bounds write. This flaw could enable remote code execution with no privileges and no user interaction, by an attacker in proximal/adjacen...

CVE-2023-21085

In ncisndsetroutingcmd of ncihmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Update Android now! Google patches three important vulnerabilities

In the April 2023 Android security bulletin, Google announced security updates which include fixes for two critical remote code execution RCE vulnerabilities and one vulnerability that has been exploited in the wild. The vulnerabilities are impacting Android systems running versions 11, 12, 12L,...

CVE-2023-21085

creationtimestamp| type| source ---|---|--- 2023-04-04 11:36:07+00:00| published-proof-of-concept| https://t.me/dilagrafie/2851 2023-04-07 11:00:06+00:00| seen| https://t.me/truesecator/4263 2025-02-06 02:44:20+00:00| seen| Telegram/-nSwXv397STRLBiKKVR6EOs6hUxpNxdOEBypwhd08fB81Uw...