{"id":"CVE-2023-35654","state":"PUBLISHED","title":"In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p","description":"In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.\n\n","publishedAt":"2023-10-11T19:21:30.861Z","updatedAt":"2024-09-18T16:18:42.477Z","severity":null,"assigner":"google_android","products":["Google Android"],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":["https://source.android.com/security/bulletin/pixel/2023-10-01"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/35xxx/CVE-2023-35654.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-35654","state":"PUBLISHED","datePublished":"2023-10-11T19:21:30.861Z","dateUpdated":"2024-09-18T16:18:42.477Z","assignerShortName":"google_android","assignerOrgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateReserved":"2023-06-15T02:50:07.507Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.\n\n"}],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-10-01"}],"problemTypes":[{"descriptions":[{"description":"Elevation of privilege","lang":"en"}]}],"providerMetadata":{"shortName":"google_android","orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateUpdated":"2023-10-11T19:21:30.861Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-10-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:30:44.699Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-18T16:18:35.737261Z","id":"CVE-2023-35654","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-18T16:18:42.477Z"}}]}}}