Lucene search

K
vulnrichmentGoogle_androidVULNRICHMENT:CVE-2023-21367
HistoryOct 30, 2023 - 4:59 p.m.

CVE-2023-21367

2023-10-3016:59:26
google_android
github.com
scudo
heap
oob
read/write
exploit
insecure
information disclosure
local
execution
privileges

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-21367