CVE-2023-40091 — Out-of-bounds Write in Frameworks Base

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 88.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Platform Frameworks BaseGoogle Android
Timeline
PublishedDec 4
Latest updateDec 5

Description

In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶Androidplatform/frameworks_base14-next:0 — 14-next:2023-12-01+5
▶CVEListV5google/android5 versions+4
▶NVDgoogle/android5 versions+4

Patches

Patch: android.googlesource.com ↗Patch: source.android.com ↗Patch: android.googlesource.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qxhh-6r2j-rgm9: In onTransact of IncidentService↗2023-12-05
▶
OSV
CVE-2023-40091: In onTransact of IncidentService↗2023-12-01
▶

📋Vendor Advisories

1
Android
CVE-2023-40091: Android Security Bulletin 2023-12-01 CVE: CVE-2023-40091 Severity: HIGH Type: EoP Affected AOSP versions: 11, 12, 12L, 13, 14 References: A-283699145↗2023-12-01
▶