medium5.5
CVE-2023-40074
In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed.
Impact
In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 11.0, 12.0, 12.1, 13.0 |
References
- NVD record
- CVE.org record
- https://android.googlesource.com/platform/frameworks/base/+/40e4ea759743737958dde018f3606d778f7a53f3
- https://source.android.com/security/bulletin/2023-12-01
- https://android.googlesource.com/platform/frameworks/base/+/40e4ea759743737958dde018f3606d778f7a53f3
- https://source.android.com/security/bulletin/2023-12-01