4.4 Moyenne

CVE-2023-32876 In keyInstall, there is a possible information disclosure due to a missing bounds check

Description

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...	Versions non publiées

Les 18 CVE de MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... →

CVE-2024-20013 In keyInstall, there is a possible out of bounds write due to a missing bounds check 6.7 Moyenne CVE-2024-20012 In keyInstall, there is a possible escalation of privilege due to type confusion 6.7 Moyenne CVE-2024-20010 In keyInstall, there is a possible escalation of privilege due to type confusion 6.7 Moyenne CVE-2023-32875 In keyInstall, there is a possible information disclosure due to a missing bounds check 4.4 Moyenne

Vous utilisez MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... ?

Suivre cette CVE Surveiller MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2023-32876

Chronologie

Publiée 2 janvier 2024
Dernière modification 3 juin 2025

Références

corp.mediatek.com corp.mediatek.com

Suivre cette CVE

CVE-2023-32876 In keyInstall, there is a possible information disclosure due to a missing bounds check

Description

Produits et versions touchés

Autres CVE de MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...