CVE-2023-21153

Summary

CVE-2023-21153 is a vulnerability affecting the Android kernel. Specifically, in the "Do_AIMS_SET_CALL_WAITING" function of "imsservice.cpp," there is a missing bounds check that could result in an out-of-bounds read. This issue grants an attacker local privilege escalation, requiring System execution privileges. Notably, user interaction is not necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.