Type confusion

2023-11-0604:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

vdec

type confusion

out of bounds write

local privilege escalation

patch id

issue id

system execution privileges

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896 & ALPS08013430; Issue ID: ALPS07867715.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	13.0

References

corp.mediatek.com/product-security-bulletin/November-2023