In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://source.android.com/docs/security/bulletin/android-14 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2023-10-30T16:56:39.728Z
Updated: 2024-09-17T13:24:14.228Z
Reserved: 2022-11-03T22:37:50.663Z
Link: CVE-2023-21366
Vulnrichment
Updated: 2024-08-02T09:36:33.587Z
NVD
Status : Analyzed
Published: 2023-10-30T17:15:51.973
Modified: 2023-11-02T20:39:50.183
Link: CVE-2023-21366
Redhat
No data.