CVE-2023-21063 - In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check · CoreCVE

Back Back to CVE browser

MEDIUM

In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check

Published Mar 24, 2023

6.7

MEDIUM

CVSS 3.1

EPSS 0.10%

Description

In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243129862References: N/A

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android kernel

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android kernel

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-25231
Advisory
https://source.android.com/security/bulletin/pixel/2023-03-01
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-25231		Advisory
https://source.android.com/security/bulletin/pixel/2023-03-01		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Mar 24, 2023

Updated Feb 20, 2025

Reserved Nov 3, 2022

Link CVE-2023-21063

CISA Vulnrichment

Updated Feb 20, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-21063

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Mar 24, 2023

Updated Feb 20, 2025

Link EUVD-2023-25231

GitHub

No data