Lucene search
MediaTekVULNRICHMENT:CVE-2023-32873
HistoryMay 06, 2024 - 2:51 a.m.
CVE-2023-32873

2024-05-0602:51:50
CWE-787
MediaTek
github.com
keyinstall
bounds check
privilege escalation
patch id
issue id
local execution privileges
AI Score
7.2
Confidence
High
EPSS
Percentile
9.0%
SSVC
Exploitation
None
Automatable
Technical Impact
Total
JSON
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227.
ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6761",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6765",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6768",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6833",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6853",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6855",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6893",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6895",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6983",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8321",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8385",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8755",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8765",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8766",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8771",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8781",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8786",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8788",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8789",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8791t",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8792",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8795t",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8796",
    "versions": [
      {
        "status": "affected",
        "version": "android_12.0",
        "versionType": "custom",
        "lessThanOrEqual": "android_14.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]
References

corp.mediatek.com/product-security-bulletin/May-2024