6.7
Medium
CVE-2023-32828 In vpu, there is a possible out of bounds write due to an integer overflow
Description
In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767817; Issue ID: ALPS07767817.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6771 | Versions not published | |
| mt6779 | Versions not published | |
| mt6785 | Versions not published | |
| mt6853 | Versions not published | |
| mt6853t | Versions not published | |
| mt6873 | Versions not published | |
| mt6877 | Versions not published | |
| mt6885 | Versions not published | |
| mt6891 | Versions not published |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6893 | Versions not published | |
| mt8183 | Versions not published | |
| mt8188 | Versions not published | |
| mt8195 | Versions not published | |
| mt8390 | Versions not published | |
| mt8395 | Versions not published | |
| MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8183, MT8188, MT8195, MT8390, MT8395 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt6771
The 19 CVEs of mt6771 →
CVE-2024-20076
In Modem, there is a possible system crash due to incorrect error handling
7.5
High
CVE-2024-20077
In Modem, there is a possible system crash due to incorrect error handling
7.5
High
CVE-2023-32871
In DA, there is a possible permission bypass due to an incorrect status check
5.3
Medium
CVE-2024-20044
In da, there is a possible out of bounds write due to a missing bounds check
6.6
Medium