Lucene search

K
nvd[email protected]NVD:CVE-2023-32858
HistoryDec 04, 2023 - 4:15 a.m.

CVE-2023-32858

2023-12-0404:15:08
web.nvd.nist.gov
4
information disclosure
gz
data erasing
local disclosure
system execution privileges

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

5.1%

In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07806008; Issue ID: ALPS07806008.

Affected configurations

Nvd
Node
googleandroidMatch13.0
AND
mediatekmt6761Match-
OR
mediatekmt6765Match-
OR
mediatekmt6771Match-
OR
mediatekmt6835Match-
OR
mediatekmt6886Match-
OR
mediatekmt6983Match-
OR
mediatekmt6985Match-
OR
mediatekmt8766Match-
OR
mediatekmt8768Match-
OR
mediatekmt8788Match-
VendorProductVersionCPE
googleandroid13.0cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
mediatekmt6761-cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*
mediatekmt6765-cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*
mediatekmt6771-cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*
mediatekmt6835-cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
mediatekmt6886-cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
mediatekmt6983-cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
mediatekmt6985-cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
mediatekmt8766-cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*
mediatekmt8768-cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-32858