Skip to content
6.7 Medium

CVE-2023-32824 In rpmb , there is a possible double free due to improper locking

Description

In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961.

Affected products and versions

Product Affected versions Fixed in
MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8666, MT8765, MT8788 Versions not published
mt6580 Versions not published
mt6739 Versions not published
mt6761 Versions not published
mt6762 Versions not published
mt6765 Versions not published
mt6768 Versions not published
mt6769 Versions not published
mt6779 Versions not published
Show the 24 other branches
Product Affected versions Fixed in
mt6781 Versions not published
mt6785 Versions not published
mt6789 Versions not published
mt6833 Versions not published
mt6853 Versions not published
mt6853t Versions not published
mt6855 Versions not published
mt6873 Versions not published
mt6875 Versions not published
mt6877 Versions not published
mt6879 Versions not published
mt6883 Versions not published
mt6885 Versions not published
mt6889 Versions not published
mt6891 Versions not published
mt6893 Versions not published
mt6895 Versions not published
mt6983 Versions not published
mt6985 Versions not published
mt8666 Versions not published
mt8765 Versions not published
mt8788 Versions not published
Android 13.0 No fix stated
Android 12.0 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8666, MT8765, MT8788 →
Track this CVE