CVE-2023-21038

In cs40l2xcptriggerqueueshow of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-21038

CVE-2023-21038 affects the Android kernel driver Cs40l2x (cs40l2x_cp_trigger_queue_show). The vulnerability is a use-after-free that enables an out-of-bounds write, yielding local escalation of privilege with SYSTEM privileges required. Exploitation is local and does not require user interaction....