Lucene search
MediaTekCVE-2023-32820HistoryOct 02, 2023 - 3:15 a.m.
CVE-2023-32820
2023-10-0203:15:09
CWE-617
CWE-20
MediaTek
web.nvd.nist.gov
65
wlan firmware
firmware assertion
denial of service
remote
nvd
cve-2023-32820
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
27.2%
In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.
Affected configurations
Node
linuxfoundationyoctoMatch3.1
ORlinuxfoundationyoctoMatch3.3
ORmediatekiot_yoctoMatch23.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
ORgoogleandroidMatch13.0
ORlinuxlinux_kernelMatch4.19-
mediatekmt5221Match-
ORmediatekmt6781Match-
ORmediatekmt6833Match-
ORmediatekmt6853Match-
ORmediatekmt6853tMatch-
ORmediatekmt6855Match-
ORmediatekmt6873Match-
ORmediatekmt6875Match-
ORmediatekmt6877Match-
ORmediatekmt6879Match-
ORmediatekmt6883Match-
ORmediatekmt6885Match-
ORmediatekmt6886Match-
ORmediatekmt6889Match-
ORmediatekmt6891Match-
ORmediatekmt6893Match-
ORmediatekmt6895Match-
ORmediatekmt6983Match-
ORmediatekmt6985Match-
ORmediatekmt7663Match-
ORmediatekmt7668Match-
ORmediatekmt7902Match-
ORmediatekmt7921Match-
ORmediatekmt8168Match-
ORmediatekmt8365Match-
ORmediatekmt8518sMatch-
ORmediatekmt8532Match-
ORmediatekmt8666Match-
ORmediatekmt8673Match-
ORmediatekmt8675Match-
ORmediatekmt8695Match-
ORmediatekmt8766Match-
ORmediatekmt8768Match-
ORmediatekmt8781Match-
ORmediatekmt8786Match-
ORmediatekmt8789Match-
ORmediatekmt8791Match-
ORmediatekmt8797Match-
ORmediatekmt8798Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linuxfoundation | yocto | 3.1 | cpe:2.3:a:linuxfoundation:yocto:3.1:*:*:*:*:*:*:* |
| linuxfoundation | yocto | 3.3 | cpe:2.3:a:linuxfoundation:yocto:3.3:*:*:*:*:*:*:* |
| mediatek | iot_yocto | 23.0 | cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:* |
| android | 11.0 | cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | |
| android | 12.0 | cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | |
| android | 13.0 | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* | |
| linux | linux_kernel | 4.19 | cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:* |
| mediatek | mt5221 | - | cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:* |
| mediatek | mt6781 | - | cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:* |
| mediatek | mt6833 | - | cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT5221, MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT7663, MT7668, MT7902, MT7921, MT8168, MT8365, MT8518S, MT8532, MT8666, MT8673, MT8675, MT8695, MT8766, MT8768, MT8781, MT8786, MT8789, MT8791, MT8797, MT8798",
"versions": [
{
"version": "Android 11.0, 12.0, 13.0 / Linux 4.19 / Yocto 3.1, 3.3 / IOT-v23.0",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-32820
2023-10-02 03:15:09
cvelist
cvelist
CVE-2023-32820
2023-10-02 02:05:28
prion
prion
Input validation
2023-10-02 03:15:00
vulnrichment
vulnrichment
CVE-2023-32820
2023-10-02 02:05:28
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
27.2%
Related for CVE-2023-32820