8 matches found
CVE-2023-21046
In ConvertToHalMetadata of aidlutils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...
CVE-2023-21047
In ConvertToHalMetadata of aidlutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...
CVE-2023-21046
In ConvertToHalMetadata of aidlutils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...
Out-of-bounds
In ConvertToHalMetadata of aidlutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...
PT-2023-17836
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an incorrect bounds check in the ConvertToHalMetadata function of aidl utils.cc, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring...
CVE-2023-21046
CVE-2023-21046 affects the Android kernel (aidl_utils.cc, ConvertToHalMetadata). The bug is an out-of-bounds read caused by an incorrect bounds check, leading to possible local information disclosure with system privileges required; exploitation is LOCAL with LOW complexity and does not require u...
CVE-2023-21047
In ConvertToHalMetadata of aidlutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from Google, Inc. Google Pixel is vulnerable to a buffer overflow vulnerability, which stems from a boundary error in the data processed in ConvertToHalMetadata in aidlutils.cc, and can be exploited by attackers to obtain sensitive information...