CVE-2023-40100
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 15, 2024
Updated: Dec 16, 2024
CWE ID 416
Summary
CVE-2023-40100 is a newly disclosed vulnerability affecting an unspecified software component. The issue lies within the "discovery_thread" function of Dns64Configuration.cpp. This vulnerability results in a memory corruption due to a use-after-free condition. An attacker can exploit this flaw to escalate local privileges without requiring any additional execution privileges or user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android