Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32805

In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08102892; Issue ID: ALPS08102892.

Published

2023-09-04T03:15:12.140

Last Modified

2024-11-21T08:04:03.750

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	google	android	11.0	Yes
Operating System	google	android	12.0	Yes
Hardware	mediatek	mt8168	-	No
Hardware	mediatek	mt8675	-	No

References

https://corp.mediatek.com/product-security-bulletin/September-2023 Vendor Advisory ([email protected])
https://corp.mediatek.com/product-security-bulletin/September-2023 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)