CVE-2023-21156

Summary

CVE-2023-21156 is a vulnerability affecting the Android kernel. In the file protocolmiscbulider.cpp, there is a flaw in the BuildGetRadioNode function, which may result in an out-of-bounds read due to insufficient input validation. This issue can lead to local information disclosure, potentially granting unauthorized access to sensitive data with System execution privileges. Notably, user interaction is not required for an attacker to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.