CVE-2023-21216

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Dec 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-212179.8In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pri CVE-2023-212189.8In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could le CVE-2023-212197.5there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informat CVE-2023-21226.1The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise and escape the iowd_tabs_active parameter before rendering it CVE-2023-212207.5there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informat CVE-2023-212226.7In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of CVE-2023-212237.5In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could l CVE-2023-212247.5In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could CVE-2023-212257.8there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalatio CVE-2023-212267.5In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could l CVE-2023-212277.5In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local informati CVE-2023-212289.8In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could le