CVE-2023-21127

CVE-2023-21127 affects Android (11, 12, 12L, 13) via the NuMediaExtractor.cpp function readSampleData, where an out-of-bounds write on uninitialized data is possible. This can lead to remote code execution with no additional privileges required, with user interaction needed for exploitation. Mult...

CVE-2023-21127: Use of Uninitialized Resource

In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12...