CVE-2023-40077

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to sensitive data...

CVE-2023-40077

CVE-2023-40077 is a Critical Elevation of Privilege (EoP) vulnerability affecting the Android Framework specifically within the MetaDataBase.cpp component. The root cause is a race condition leading to a Use-After-Free (UAF) write when using shared resources. Successful exploitation allows a remo...