6.7
Medium
CVE-2023-32812 In gnss service, there is a possible out of bounds write due to improper input validation
Description
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt8365 | Versions not published | |
| MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6895, MT6980, MT6983, MT6985, MT6990, MT... | Versions not published |
Other CVEs of mt8365
The 25 CVEs of mt8365 →
CVE-2024-20125
In vdec, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20108
In atci, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20100
In wlan driver, there is a possible out of bounds write due to improper input validation
9.8
Critical
CVE-2024-20021
In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error
6.7
Medium