CVE-2023-35662

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-356637.5In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inforCVE-2023-356645.5In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to locCVE-2023-356657.8In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to localCVE-2023-356667.8In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation CVE-2023-356677.8In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a lCVE-2023-356685.5In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to CVE-2023-356697.8In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe CVE-2023-35677.1A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attackerCVE-2023-356707.8In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a patCVE-2023-356715.5In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number aCVE-2023-356738.8In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximCVE-2023-356747.8In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead t
CVE-2023-35662: Critical severity, CVSS 9.8 | Vulnix