CVE-2023-35690: In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation...

0.0 CVSS

Description

In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Classification

CVE ID: CVE-2023-35690

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: Google

Product: Android

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.12% (probability of being exploited)

EPSS Percentile: 47.5% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://source.android.com/security/bulletin/2023-12-01

Timeline