Lucene search

Google_androidVULNRICHMENT:CVE-2023-21309

HistoryOct 30, 2023 - 4:56 p.m.

CVE-2023-21309

2023-10-3016:56:29

google_android

github.com

out of bounds read

libcore

local information disclosure

user interaction

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

source.android.com/docs/security/bulletin/android-14