CVE-2023-35654

MEDIUM

Android - Out-of-bounds Read in stmvl53l1_module.c ctrl_roi

Title source: llm
STIX 2.1

Description

In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1

Scores

CVSS v3 6.7
EPSS 0.0009
EPSS Percentile 0.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-125
Status published
Products (1)
google/android
Published Oct 11, 2023
Tracked Since Feb 18, 2026