CVE-2023-21106

CVSS v3.1 7.8 (High)

EPSS 0.04 % (5^th)

Affected Products 1

Advisories 7

In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel

Weaknesses

CWE-415: Double Free

CVE Status: PUBLISHED
CNA: Android (associated with Google Inc. or Open Handset Alliance)
Published Date: 2023-05-15 22:15:11
(16 months ago)
Updated Date: 2023-05-24 00:16:34
(16 months ago)

Affected Products

Google

Android

Configuration #1

		CPE23	From	Up To
	Google Android	cpe:2.3:o:google:android:-