CVE-2023-48413

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Google	Android	Android kernel

References

https://source.android.com/security/bulletin/pixel/2023-12-01Vendor Advisory
https://source.android.com/security/bulletin/pixel/2023-12-01Vendor Advisory

Timeline

Published: Dec 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-484146.7In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of priv CVE-2023-484155.5In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat CVE-2023-484167.5In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no CVE-2023-484179.8Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application CVE-2023-484187.8In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecur CVE-2023-484199.8An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege CVE-2023-48425.4The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode CVE-2023-484206.4there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege CVE-2023-484217.8In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possibl CVE-2023-484225.5In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio CVE-2023-484239.8In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod CVE-2023-484249.8U-Boot shell vulnerability resulting in Privilege escalation in a production device