CVE-2023-21227Sensitive Information Exposure in Google Android

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 71.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
Latest updateDec 1
PublishedDec 4

Description

In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

CVEListV5google/androidAndroid SoC

🔴Vulnerability Details

1
OSV
CVE-2023-21227: In HTBLogKM of htbserver2023-12-01

📋Vendor Advisories

1
Android
CVE-2023-21227: PowerVR-GPU2023-12-01