{"id":"CVE-2023-21263","aliases":["A-305095406","ASB-A-305095406","EUVD-2023-25431","GHSA-hq5q-2gr8-54vj"],"status":"published","title":"There is elevation of privilege.","description":"In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00446,"percentile":0.39089,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2023-12-01","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21263"},{"url":"https://github.com/advisories/GHSA-hq5q-2gr8-54vj"}],"sources":{"cve":[{"id":"CVE-2023-21263","description":"   In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:48.595Z","modified":"2024-08-02T09:28:26.184Z","updated_at":"2026-11-02T14:35:20.368244Z"}],"euvd":[{"id":"EUVD-2023-25431","description":"   In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:48Z","modified":"2024-08-02T09:28:26Z","updated_at":"2026-11-03T03:50:08.95234Z"}],"ghsa":[{"id":"GHSA-hq5q-2gr8-54vj","title":"There is elevation of privilege.","description":"There is elevation of privilege.","status":"published","published":"2023-12-05T00:31:07Z","modified":"2023-12-16T05:05:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:55:13.486361Z"}],"nvd":[{"id":"CVE-2023-21263","description":"   In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T23:15:22.813Z","modified":"2026-06-17T05:32:11.967Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:08:52.544469Z"}],"osv":[{"id":"ASB-A-305095406","description":"   In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due\n    to an uncaught exception. This could lead to local escalation of privilege\n    in the kernel with no additional execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2023-12-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}