{"id":"CVE-2023-21402","aliases":["A-305093885","ASB-A-305093885","EUVD-2023-25570","GHSA-p89v-fx27-fcch"],"status":"published","title":"There is elevation of privilege.","description":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00414,"percentile":0.35954,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2023-12-01","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21402"},{"url":"https://github.com/advisories/GHSA-p89v-fx27-fcch"}],"sources":{"cve":[{"id":"CVE-2023-21402","description":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:49.339Z","modified":"2024-08-02T09:36:34.325Z","updated_at":"2026-11-02T14:35:19.959682Z"}],"euvd":[{"id":"EUVD-2023-25570","description":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:49Z","modified":"2024-08-02T09:36:34Z","updated_at":"2026-11-03T03:50:07.959006Z"}],"ghsa":[{"id":"GHSA-p89v-fx27-fcch","title":"There is elevation of privilege.","description":"There is elevation of privilege.","status":"published","published":"2023-12-05T00:31:07Z","modified":"2023-12-16T05:06:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:55:13.988699Z"}],"nvd":[{"id":"CVE-2023-21402","description":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T23:15:23.027Z","modified":"2026-06-17T05:32:31.05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:08:52.544469Z"}],"osv":[{"id":"ASB-A-305093885","description":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read\n    due to improper input validation. This could lead to local escalation of\n    privilege in the kernel with no additional execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2023-12-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:06.383013Z"}]}}