Google ML Kit EARLXML Parser Integer Overflow & RCE Vulnerability (CVE-2023-4871)

Security Vulnerabilities in XE within MLKit's EARLXML Parser (parseXMLString / getNumberOrDataElement / checkFloatOrDataElement) Vulnerability Overview Google ML Kit's EARLXML parser contains multiple security vulnerabilities when processing XML strings, including: Integer overflow leading to heap memory corruption Null pointer dereference Out-of-bounds read/write Access to uninitialized memory Logic errors causing crashes or potential code execution These vulnerabilities exist within the , , and functions. Attackers can craft malicious XML inputs to trigger crashes or potentially achieve remote code execution. Scope of Impact Affected Product: Google ML Kit (Android/iOS) Affected Versions: All versions utilizing the EARLXML parser (unfixed as of the release of CVE-2023-4871) Affected Components: - - - Trigger Conditions: Parsing user-controllable XML strings (e.g., from networks, files, user input, etc.) Remediation Official Fix: Google has patched this vulnerability in subsequent versions (specific version numbers must be verified via official announcements). Temporary Mitigation Measures: - Avoid parsing untrusted XML inputs. - Enforce strict validation and length limits on inputs. - Upgrade to the latest version of ML Kit. Patch Status: Fixed (CVE-2023-4871) POC Code / Exploit Code > Note: Actual POCs must be constructed based on specific vulnerability points; the above is illustrative code. Full exploitation requires consideration of memory layout and the execution environment. Other Key Information CVE ID: CVE-2023-4871 Disclosure Date: October 2023 Reporter: Security Researcher (Anonymous) CVSS Score: 7.5 (High) Remediation Recommendation: Immediately upgrade ML Kit to the latest version and review all XML parsing logic.

Goal Reached Thanks to every supporter — we hit 100%!

Google ML Kit EARLXML Parser Integer Overflow & RCE Vulnerability (CVE-2023-4871)

More from this source