VDB
CVE-2023-35685
CVE-2023-35685
PUBLISHED
CVSS 7.800000190734863 HIGH
In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
EPSS 0.15% · 4.5th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.15%
4.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | ||
| Android | Android SoC |
Timeline
- Jan 8, 2025 CVE Published
- Jan 8, 2025 PoC Published
- Jan 8, 2025 PoC Published
- Jan 9, 2025 EPSS Score
- Jan 25, 2025 EPSS Score
- Jan 31, 2025 CVE Updated
- Feb 10, 2025 EPSS Score
- Feb 26, 2025 EPSS Score
- Mar 13, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- Apr 30, 2025 EPSS Score