CVE-2023-21156

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-211576.7In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priCVE-2023-211584.4In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information discloCVE-2023-211596.7In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priviCVE-2023-211605.5In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to localCVE-2023-211616.7In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priviCVE-2023-211629.8In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalatCVE-2023-211639.8In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privCVE-2023-211649.8In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escCVE-2023-211657.8In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local eCVE-2023-211669.8In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalatioCVE-2023-211675.5In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. ThisCVE-2023-211685.5In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor
CVE-2023-21156: Medium severity, CVSS 4.4 | Vulnix