CVE-2023-20994
published 2023-03-24CVE-2023-20994: In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…
PriorityP429medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.10%
0.8th percentile
In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | system_libufdt | >= 13:0 < 13:2023-03-01 | 13:2023-03-01 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g8w9-22g6-mj88: In _ufdt_output_property_to_fdt of ufdt_convert
ghsa_unreviewed·2023-03-24
CVE-2023-20994 [MEDIUM] CWE-787 GHSA-g8w9-22g6-mj88: In _ufdt_output_property_to_fdt of ufdt_convert
In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118
OSV
CVE-2023-20994: In _ufdt_output_property_to_fdt of ufdt_convert
osv·2023-03-01
CVE-2023-20994 CVE-2023-20994: In _ufdt_output_property_to_fdt of ufdt_convert
In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Red Hat
gstreamer-plugins-base: heap overwrite in subtitle parsing
vendor_redhat·2023-07-05·CVSS 8.8
CVE-2023-37328 [HIGH] CWE-122 gstreamer-plugins-base: heap overwrite in subtitle parsing
gstreamer-plugins-base: heap overwrite in subtitle parsing
GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of PGS subtitle files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-20994.
A heap-based buffer overflow was found in the subparse subtitle parser of GStreamer wh
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-24
Published