{"id":"CVE-2023-21156","aliases":["A-264540759","EUVD-2023-25324","GHSA-c76m-968m-hh93","PUB-A-264540759"],"status":"published","title":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to...","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00094,"percentile":0.00586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-06-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2023-06-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2023-06-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-06-01","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21156"},{"url":"https://github.com/advisories/GHSA-c76m-968m-hh93"},{"url":"https://source.android.com/security/bulletin/2023-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-21156","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A","status":"published","published":"2023-06-28T00:00:00Z","modified":"2024-12-03T14:42:06.288Z","updated_at":"2026-11-02T14:35:20.368244Z"}],"euvd":[{"id":"EUVD-2023-25324","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A","status":"published","published":"2023-06-28T00:00:00Z","modified":"2024-12-03T14:42:06Z","updated_at":"2026-11-03T00:04:42.699051Z"}],"ghsa":[{"id":"GHSA-c76m-968m-hh93","title":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to...","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A","status":"published","published":"2023-06-28T18:30:25Z","modified":"2024-04-04T05:14:44Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:56:30.604932Z"}],"nvd":[{"id":"CVE-2023-21156","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A","status":"published","published":"2023-06-28T18:15:13.847Z","modified":"2026-06-17T05:31:57.967Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"PUB-A-264540759","description":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-06-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:08.408541Z"}]}}