CVE-2023-21403Google Android vulnerability

3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.1%
top 71.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
Latest updateDec 1
PublishedDec 4

Description

In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

CVEListV5google/androidAndroid SoC

🔴Vulnerability Details

1
OSV
CVE-2023-21403: In RGXDestroyZSBufferKM of rgxta3d2023-12-01

📋Vendor Advisories

1
Android
CVE-2023-21403: PowerVR-GPU2023-12-01