CVE-2023-21102

CVSS v3.1 7.8 (High)

EPSS 0.04 % (5^th)

Affected Products 1

Advisories 14

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Android (associated with Google Inc. or Open Handset Alliance)
Published Date: 2023-05-15 22:15:11
(16 months ago)
Updated Date: 2023-05-24 00:15:29
(16 months ago)

Affected Products

Google

Android

Configuration #1

		CPE23	From	Up To
	Google Android	cpe:2.3:o:google:android:-