Lucene search

MediaTekCVE-2023-32874

HistoryJan 02, 2024 - 3:15 a.m.

CVE-2023-32874

2024-01-0203:15:07

CWE-787

MediaTek

web.nvd.nist.gov

cve-2023-32874

modem

ims stack

out of bounds write

remote code execution

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).

Affected configurations

Nvd

Node

mediateklr13Match-

mediateknr15Match-

mediateknr16Match-

mediateknr17Match-

AND

mediatekmt2735Match-

mediatekmt6779Match-

mediatekmt6781Match-

mediatekmt6783Match-

mediatekmt6785Match-

mediatekmt6785tMatch-

mediatekmt6789Match-

mediatekmt6813Match-

mediatekmt6833Match-

mediatekmt6833pMatch-

mediatekmt6835Match-

mediatekmt6853Match-

mediatekmt6853tMatch-

mediatekmt6855Match-

mediatekmt6873Match-

mediatekmt6875Match-

mediatekmt6877Match-

mediatekmt6877tMatch-

mediatekmt6878Match-

mediatekmt6879Match-

mediatekmt6880Match-

mediatekmt6883Match-

mediatekmt6885Match-

mediatekmt6886Match-

mediatekmt6889Match-

mediatekmt6890Match-

mediatekmt6891Match-

mediatekmt6893Match-

mediatekmt6895Match-

mediatekmt6895tMatch-

mediatekmt6896Match-

mediatekmt6897Match-

mediatekmt6980Match-

mediatekmt6980dMatch-

mediatekmt6983tMatch-

mediatekmt6983wMatch-

mediatekmt6983zMatch-

mediatekmt6985Match-

mediatekmt6985tMatch-

mediatekmt6989Match-

mediatekmt6990Match-

VendorProductVersionCPE
mediateklr13-cpe:2.3:o:mediatek:lr13:-:*:*:*:*:*:*:*
mediateknr15-cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*
mediateknr16-cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*
mediateknr17-cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*
mediatekmt2735-cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
mediatekmt6779-cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*
mediatekmt6781-cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*
mediatekmt6783-cpe:2.3:h:mediatek:mt6783:-:*:*:*:*:*:*:*
mediatekmt6785-cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*
mediatekmt6785t-cpe:2.3:h:mediatek:mt6785t:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mediatek	lr13	-	cpe:2.3:o:mediatek:lr13:-:::::::*
mediatek	nr15	-	cpe:2.3:o:mediatek:nr15:-:::::::*
mediatek	nr16	-	cpe:2.3:o:mediatek:nr16:-:::::::*
mediatek	nr17	-	cpe:2.3:o:mediatek:nr17:-:::::::*
mediatek	mt2735	-	cpe:2.3:h:mediatek:mt2735:-:::::::*
mediatek	mt6779	-	cpe:2.3:h:mediatek:mt6779:-:::::::*
mediatek	mt6781	-	cpe:2.3:h:mediatek:mt6781:-:::::::*
mediatek	mt6783	-	cpe:2.3:h:mediatek:mt6783:-:::::::*
mediatek	mt6785	-	cpe:2.3:h:mediatek:mt6785:-:::::::*
mediatek	mt6785t	-	cpe:2.3:h:mediatek:mt6785t:-:::::::*

Rows per page:

1-10 of 451

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2735, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990",
    "versions": [
      {
        "version": "Modem LR13 NR15, NR16, and NR17",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/January-2024

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2023-32874