CVE-2023-21041

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250123688References: N/A

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-210426.7In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with CVE-2023-210436.7In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with CVE-2023-210444.4In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatiCVE-2023-210454.4When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclCVE-2023-210464.4In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local CVE-2023-210474.4In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local infCVE-2023-210484.4In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloCVE-2023-210494.4In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to locCVE-2023-21058.8Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.CVE-2023-210506.7In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to localCVE-2023-210516.7In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local CVE-2023-210526.7In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local
CVE-2023-21041: High severity, CVSS 7.8 | Vulnix