CVE-2023-21217

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
GoogleAndroidAndroid SoC

References

Timeline

Published
Dec 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-212189.8In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could leCVE-2023-212197.5there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informatCVE-2023-21226.1The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise and escape the iowd_tabs_active parameter before rendering it CVE-2023-212207.5there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informatCVE-2023-212226.7In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of CVE-2023-212237.5In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lCVE-2023-212247.5In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This couldCVE-2023-212257.8there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalatioCVE-2023-212267.5In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lCVE-2023-212277.5In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local informatiCVE-2023-212289.8In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could leCVE-2023-212297.8In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe Pen
CVE-2023-21217: Critical severity, CVSS 9.8 | Vulnix