CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

creationtimestamp| type| source ---|---|--- 2023-11-06 07:30:38+00:00| seen| https://t.me/cibsecurity/73569 2024-06-13 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html 2025-04-25 16:07:11+00:00| published-proof-of-concept|...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357...

CVE-2023-32837

CVE-2023-32837 is a MediaTek JPEG decoding accelerator vulnerability in the mtk_jpeg driver exposed to unprivileged userland on devices like Xiaomi 11T and Asus ROG 6D. The flaw is an out-of-bounds read/write in an array of structs, caused by a race between the JPEG_DEC_IOCTL_HYBRID_START path (w...