Unscored CVE-2023-48406 EUVD-2023-52457GHSA-ccr3-hvjj-q8xh

there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to loc…

Published Dec 8, 2023 · Updated Aug 28, 2024 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2023-3073 Google Android Pixel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 6, 2023

References

https://source.android.com/security/bulletin/pixel/2023-12-01