6.7
Medium
CVE-2023-32811 In connectivity system driver, there is a possible out of bounds write due to improper input validation
Description
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| yocto | 4.0 | No fix stated |
| iot_yocto | 23.0 | No fix stated |
| Android | 13.0 | No fix stated |
| MT2713, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT8168, MT8175, MT8188, MT8195, MT8365, MT8666, MT8667, MT8673 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of yocto
The 8 CVEs of yocto →
CVE-2024-20089
In wlan, there is a possible denial of service due to incorrect error handling
7.5
High
CVE-2023-20850
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking
6.5
Medium
CVE-2023-20849
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking
6.5
Medium
CVE-2023-20805
In imgsys, there is a possible out of bounds write due to a missing bounds check
6.7
Medium