CVE-2023-32850

2023-12-0403:45:44

MediaTek

www.cve.org

integer overflow

local privilege escalation

decoder

user interaction

patch alps08016659

issue alps08016659

0.0005 Low

EPSS

Percentile

18.3%

JSON

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659.

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6781, MT6789, MT6833, MT6853, MT6855, MT6877, MT6879, MT6883, MT6885, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8175, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798",
    "versions": [
      {
        "version": "Android 11.0, 12.0",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/December-2023

0.0005 Low

EPSS

Percentile

18.3%

JSON

Related for CVELIST:CVE-2023-32850