VULNERABILITY INTELLIGENCE

CVE-2023-21066

CVSS score9.8 CRITICAL

EPSS probability0.51%

CISA KEVNot currently listed

Published2023-06-28

Last modified2026-06-17

Description

In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250100597References: N/A