CVE-2022-23731
HIGHLG webOS >=4.0 - Privilege Escalation via V8 Heap Vulnerability
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-23731. PoCs published by DavidBuchanan314.
AI-analyzed exploit summary This repository contains a working exploit chain for CVE-2022-23731, targeting WebOS 4.x on 32-bit SoCs to achieve local privilege escalation (LPE) to root. The exploit leverages memory corruption and type confusion in the JavaScript engine to gain arbitrary read/write primitives and execute shellcode.
Description
V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.
Exploits (1)
This repository contains a working exploit chain for CVE-2022-23731, targeting WebOS 4.x on 32-bit SoCs to achieve local privilege escalation (LPE) to root. The exploit leverages memory corruption and type confusion in the JavaScript engine to gain arbitrary read/write primitives and execute shellcode.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H