CVE-2023-40140

Summary

CVE-2023-40140 is a vulnerability affecting the android_view_InputDevice module in android_view_InputDevice.cpp. The issue involves a use-after-free condition in the android_view_InputDevice_create function, which can be exploited to execute arbitrary code. This vulnerability allows for local privilege escalation, meaning an attacker can elevate their current privileges to a higher level without requiring any additional execution privileges. Notably, user interaction is not needed for successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.