CVE-2023-21282
published 2023-08-14CVE-2023-21282: In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
1.03%
59.4th percentile
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | external_aac | >= 11:0 < 11:2023-08-01 | 11:2023-08-01 |
| platform | external_aac | >= 12:0 < 12:2023-08-01 | 12:2023-08-01 |
| platform | external_aac | >= 12L:0 < 12L:2023-08-01 | 12L:2023-08-01 |
| platform | external_aac | >= 13-next:0 < 13-next:2023-08-01 | 13-next:2023-08-01 |
| platform | external_aac | >= 13:0 < 13:2023-08-01 | 13:2023-08-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vpr2-2qww-hp7j: In TRANSPOSER_SETTINGS of lpp_tran
ghsa_unreviewed·2023-08-15
CVE-2023-21282 [HIGH] CWE-787 GHSA-vpr2-2qww-hp7j: In TRANSPOSER_SETTINGS of lpp_tran
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
OSV
CVE-2023-21282: In TRANSPOSER_SETTINGS of lpp_tran
osv·2023-08-01
CVE-2023-21282 CVE-2023-21282: In TRANSPOSER_SETTINGS of lpp_tran
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Android
CVE-2023-21282: Android Security Bulletin 2023-08-01
CVE: CVE-2023-21282
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 11, 12, 12L, 13
References: A-279766766
vendor_android·2023-08-01·CVSS 8.8
CVE-2023-21282 [HIGH] CVE-2023-21282: Android Security Bulletin 2023-08-01
CVE: CVE-2023-21282
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 11, 12, 12L, 13
References: A-279766766
Android Security Bulletin 2023-08-01
CVE: CVE-2023-21282
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 11, 12, 12L, 13
References: A-279766766
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46https://source.android.com/security/bulletin/2023-08-01http://www.openwall.com/lists/oss-security/2025/08/13/9https://android.googlesource.com/platform/external/aac/+/4242f97d149b0bf0cd96f00cd1e9d30d5922cd46https://source.android.com/security/bulletin/2023-08-01
2023-08-14
Published