CVE-2023-21241

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-212429.8In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in theCVE-2023-212435.5In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due CVE-2023-212446.7In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead CVE-2023-212457.8In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during deviCVE-2023-212463.3In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exceptioCVE-2023-212477.8In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restrictCVE-2023-212487.8In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction dCVE-2023-212495.5In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. TCVE-2023-212509.8In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote codCVE-2023-212517.3In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. ThisCVE-2023-212525.5In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validatiCVE-2023-212535.5In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial
CVE-2023-21241: High severity, CVSS 7.8 | Vulnix