CVE-2023-21366 (android)

In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

android attacker cve design disclosure exploitation implementation information information disclosure insecure local patterns predict privileges