CVE-2023-32890

2024-01-0202:50:07

MediaTek

www.cve.org

modem

system crash

input validation

denial of service

no user interaction

EPSS

0.001

Percentile

30.8%

JSON

In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2731, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT8666, MT8667, MT8765, MT8766, MT8768, MT8786, MT8788",
    "versions": [
      {
        "version": "Modem LR12A",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/April-2024

EPSS

0.001

Percentile

30.8%

JSON

Related for CVELIST:CVE-2023-32890