Lucene search
GoogleOSV:ASB-A-282919145HistoryOct 01, 2023 - 12:00 a.m.
gpu_service_fuzzer: Heap-use-after-free in void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__
2023-10-0100:00:00
Google
osv.dev
10
gpuservice
use after free
local escalation
privilege escalation
race condition
software
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0
Percentile
5.1%
In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cvelist
cvelist
CVE-2023-40131
2023-10-27 20:22:58
prion
prion
Race condition
2023-10-27 21:15:00
nvd
nvd
CVE-2023-40131
2023-10-27 21:15:09
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2024-10422)
2023-10-16 00:00:00
cve
cve
CVE-2023-40131
2023-10-27 21:15:09
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0
Percentile
5.1%
Related for OSV:ASB-A-282919145