CVE-2023-40077

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to sensitive data...

CVE-2023-40077

This vulnerability exists in the MetaDataBase.cpp component of the Android Framework . It is caused by synchronization errors when using shared resources, leading to a Use-After-Free (UAF) write via a race condition . An attacker can exploit this flaw to achieve remote escalation of privilege wit...