Unscored CVE-2023-48420 EUVD-2023-52471GHSA-vgv8-g935-v6mx

there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileg…

Published Dec 8, 2023 · Updated Aug 28, 2024 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2023-3073 Google Android Pixel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 6, 2023

References

https://source.android.com/security/bulletin/pixel/2023-12-01