Lucene search
GoogleOSV:ASB-A-287298721HistoryNov 01, 2023 - 12:00 a.m.
rtp_writer_fuzzer: Segv on unknown address in android::ARTPWriter::~ARTPWriter
2023-11-0100:00:00
Google
osv.dev
13
artpwriter
segv
unknown address
uninitialized data
local escalation
privilege
execution privileges
user interaction
exploitation
software
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| platform/frameworks/av | eq | 12 | |
| platform/frameworks/av | eq | 13 | |
| platform/frameworks/av | eq | 14 | |
| platform/frameworks/av | eq | 12L |
Related
prion
prion
Design/Logic Flaw
2024-02-15 23:15:00
cvelist
cvelist
CVE-2023-40107
2024-02-15 22:31:15
nvd
nvd
CVE-2023-40107
2024-02-15 23:15:08
cve
cve
CVE-2023-40107
2024-02-15 23:15:08