Open mend-bolt-for-github[bot] opened 6 months ago
Library home page: https://android.googlesource.com/platform/frameworks/av
Found in base branch: master
/media/libstagefright/foundation/MetaDataBase.cpp /media/libstagefright/foundation/MetaDataBase.cpp
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Publish Date: 2023-12-04
URL: CVE-2023-40077
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High
Step up your Open Source Security Game with Mend here
CVE-2023-40077 - High Severity Vulnerability
Library home page: https://android.googlesource.com/platform/frameworks/av
Found in base branch: master
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Publish Date: 2023-12-04
URL: CVE-2023-40077
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High
For more information on CVSS3 Scores, click here.Step up your Open Source Security Game with Mend here