{"id":"CVE-2023-35690","aliases":["A-305095935","ASB-A-305095935","EUVD-2023-39690","GHSA-ph4p-2cvp-7p5f"],"status":"published","title":"There is elevation of privilege.","description":"In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00414,"percentile":0.35956,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2023-12-01","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35690"},{"url":"https://github.com/advisories/GHSA-ph4p-2cvp-7p5f"}],"sources":{"cve":[{"id":"CVE-2023-35690","description":" In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:49.946Z","modified":"2024-12-02T17:33:56.452Z","updated_at":"2026-11-02T14:35:33.794347Z"}],"euvd":[{"id":"EUVD-2023-39690","description":" In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T22:40:49Z","modified":"2024-12-02T17:33:56Z","updated_at":"2026-11-03T00:04:43.613884Z"}],"ghsa":[{"id":"GHSA-ph4p-2cvp-7p5f","title":"There is elevation of privilege.","description":"There is elevation of privilege.","status":"published","published":"2023-12-05T00:31:07Z","modified":"2023-12-07T21:31:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:55:09.695365Z"}],"nvd":[{"id":"CVE-2023-35690","description":" In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-04T23:15:23.507Z","modified":"2026-06-17T06:05:01.017Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:08:52.544469Z"}],"osv":[{"id":"ASB-A-305095935","description":"\n    In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code\n    execution due to an uncaught exception. This could lead to local escalation\n    of privilege in the kernel with no additional execution privileges needed.\n    User interaction is not needed for exploitation.","status":"published","published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:15.724291Z"}]}}