CVE-2023-48401

MEDIUM

Google Android - Out-of-Bounds Read in Protocol Adapter

Title source: llm
STIX 2.1

Description

In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 3.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (1)
google/android
Published Dec 08, 2023
Tracked Since Feb 18, 2026