9.8
CVSSv3

CVE-2023-21401

Published: 04/12/2023 Updated: 22/12/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerable Product Search on Vulmon Subscribe to Product

google android -

Vendor Advisories

LTS-114 has been updated in the LTS channel to 11405735339 (Platform Version: 15437760) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1491296 High  CVE-2023-5472 Use after free in Profiles1458934 Medium CVE-20 ...