Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from a security vulnerability that stems from the possibility of out-of-bounds reads when cpif processing detection fails, which may be reused after release...

CVE-2023-21045

CVE-2023-21045 affects the Android kernel cpif handling of probe failures. The vulnerability arises from an out-of-bounds read caused by a use-after-free, enabling local information disclosure with SYSTEM privileges; exploitation requires no user interaction. Multiple connected sources (NVD, Red ...

CVE-2023-21045

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...