CVE-2023-48397 - In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check

Back Back to CVE browser

MEDIUM

In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check

Published Dec 8, 2023

4.9

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor Google Product Android Default
unaffected
Affected
- Android kernel

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Android	unaffected	Affected Android kernel

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52448
Advisory
https://source.android.com/security/bulletin/pixel/2023-12-01
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52448		Advisory
https://source.android.com/security/bulletin/pixel/2023-12-01		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Google_Devices

Published Dec 8, 2023

Updated Aug 2, 2024

Reserved Nov 16, 2023

Link CVE-2023-48397

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-48397

Red Hat

No data

ENISA EUVD

Assigner Google_Devices

Published Dec 8, 2023

Updated Aug 2, 2024

Link EUVD-2023-52448

GitHub

No data