← Back to browse · API

CVE-2023-40077

Severity
CRITICAL
CVSS
9.8
EPSS
0.08423
Risk score
42.15
CISA KEV
No
PoC
No
Published
2023-12-04
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-44684, GHSA-8M3F-6GQR-5FMR
Products
Google:Android 11, Google:Android 12, Google:Android 12L, Google:Android 13, Google:Android 14
Sources
euvd EUVD-2023-44684

Description

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References