Lucene search
MediaTekCVE-2023-32873HistoryMay 06, 2024 - 3:15 a.m.
CVE-2023-32873
2024-05-0603:15:09
CWE-787
MediaTek
web.nvd.nist.gov
33
20
vulnerability
keyinstall
out of bounds
write
privilege escalation
patch id
issue id
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt6761_firmware
ORmediatekmt6765_firmware
ORmediatekmt6768_firmware
ORmediatekmt6833_firmware
ORmediatekmt6853_firmware
ORmediatekmt6855_firmware
ORmediatekmt6893_firmware
ORmediatekmt6895_firmware
ORmediatekmt6983_firmware
ORmediatekmt8321_firmware
ORmediatekmt8385_firmware
ORmediatekmt8755_firmware
ORmediatekmt8765_firmware
ORmediatekmt8766_firmware
ORmediatekmt8768_firmware
ORmediatekmt8771_firmware
ORmediatekmt8781_firmware
ORmediatekmt8786_firmware
ORmediatekmt8788_firmware
ORmediatekmt8789_firmware
ORmediatekmt8791t_firmware
ORmediatekmt8792_firmware
ORmediatekmt8795t_firmware
ORmediatekmt8796_firmware
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt6761_firmware | * | cpe:2.3:a:mediatek:mt6761_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6765_firmware | * | cpe:2.3:a:mediatek:mt6765_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6768_firmware | * | cpe:2.3:a:mediatek:mt6768_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6833_firmware | * | cpe:2.3:a:mediatek:mt6833_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6853_firmware | * | cpe:2.3:a:mediatek:mt6853_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6855_firmware | * | cpe:2.3:a:mediatek:mt6855_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6893_firmware | * | cpe:2.3:a:mediatek:mt6893_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6895_firmware | * | cpe:2.3:a:mediatek:mt6895_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6983_firmware | * | cpe:2.3:a:mediatek:mt6983_firmware:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6761, MT6765, MT6768, MT6833, MT6853, MT6855, MT6893, MT6895, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0",
"status": "affected"
}
]
}
]Social References
More
Related
cvelist
cvelist
CVE-2023-32873
2024-05-06 02:51:50
vulnrichment
vulnrichment
CVE-2023-32873
2024-05-06 02:51:50
nvd
nvd
CVE-2023-32873
2024-05-06 03:15:09