CVE-2023-21271 | BDVDB-2026-209604 Detail

GoogleAndroid

Description#

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4
https://source.android.com/security/bulletin/2023-08-01

Exploit#

No public exploit known

History#

Version 12023-08-14Record published in the CVE List.
Version 22024-10-09Most recent update recorded in the CVE List.