CVE-2023-21164 in Android

Sumário

de VulDB • 31/05/2026

In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 03/11/2022
• Divulgação: 05/12/2023
• Moderação: aceite
• Entrada: VDB-246929
• CPE: pronto
• CWE: CWE-416 (não confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00414
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-21164
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-21164
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-21164/