Lucene search

K
nvd[email protected]NVD:CVE-2023-32874
HistoryJan 02, 2024 - 3:15 a.m.

CVE-2023-32874

2024-01-0203:15:07
CWE-787
web.nvd.nist.gov
1
modem ims stack
out of bounds write
remote code execution
no user interaction
missing bounds check
patch id
issue id
cve-2023-32874

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).

Affected configurations

NVD
Node
mediateklr13Match-
OR
mediateknr15Match-
OR
mediateknr16Match-
OR
mediateknr17Match-
AND
mediatekmt2735Match-
OR
mediatekmt6779Match-
OR
mediatekmt6781Match-
OR
mediatekmt6783Match-
OR
mediatekmt6785Match-
OR
mediatekmt6785tMatch-
OR
mediatekmt6789Match-
OR
mediatekmt6813Match-
OR
mediatekmt6833Match-
OR
mediatekmt6833pMatch-
OR
mediatekmt6835Match-
OR
mediatekmt6853Match-
OR
mediatekmt6853tMatch-
OR
mediatekmt6855Match-
OR
mediatekmt6873Match-
OR
mediatekmt6875Match-
OR
mediatekmt6877Match-
OR
mediatekmt6877tMatch-
OR
mediatekmt6878Match-
OR
mediatekmt6879Match-
OR
mediatekmt6880Match-
OR
mediatekmt6883Match-
OR
mediatekmt6885Match-
OR
mediatekmt6886Match-
OR
mediatekmt6889Match-
OR
mediatekmt6890Match-
OR
mediatekmt6891Match-
OR
mediatekmt6893Match-
OR
mediatekmt6895Match-
OR
mediatekmt6895tMatch-
OR
mediatekmt6896Match-
OR
mediatekmt6897Match-
OR
mediatekmt6980Match-
OR
mediatekmt6980dMatch-
OR
mediatekmt6983tMatch-
OR
mediatekmt6983wMatch-
OR
mediatekmt6983zMatch-
OR
mediatekmt6985Match-
OR
mediatekmt6985tMatch-
OR
mediatekmt6989Match-
OR
mediatekmt6990Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

Related for NVD:CVE-2023-32874