Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-21096 EUVD-2023-25264GHSA-q697-jx8q-hvf2

In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional ex…

Published Apr 19, 2023 · Updated Feb 5, 2025 · Assigned by google_android

Description

In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-254774758

Affected products

VendorProductAffectedFixed
— Android Android-12 Android-12L Android-13 —

Advisories 2

References