6.7
Moyenne
CVE-2023-32811 In connectivity system driver, there is a possible out of bounds write due to improper input validation
Description
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| yocto | 4.0 | Pas de correctif indiqué |
| iot_yocto | 23.0 | Pas de correctif indiqué |
| Android | 13.0 | Pas de correctif indiqué |
| MT2713, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT8168, MT8175, MT8188, MT8195, MT8365, MT8666, MT8667, MT8673 | Versions non publiées |
Références
- corp.mediatek.com corp.mediatek.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de yocto
Les 8 CVE de yocto →
CVE-2024-20089
In wlan, there is a possible denial of service due to incorrect error handling
7.5
Élevée
CVE-2023-20850
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking
6.5
Moyenne
CVE-2023-20849
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking
6.5
Moyenne
CVE-2023-20805
In imgsys, there is a possible out of bounds write due to a missing bounds check
6.7
Moyenne