CVE-2023-32832

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:04

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html - () http://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html -
References () https://corp.mediatek.com/product-security-bulletin/November-2023 - Vendor Advisory () https://corp.mediatek.com/product-security-bulletin/November-2023 - Vendor Advisory

14 Nov 2023, 03:15

Type Values Removed Values Added
References
  • () http://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html -

13 Nov 2023, 18:51

Type Values Removed Values Added
First Time Mediatek
Mediatek mt6883
Google
Mediatek mt6893
Mediatek mt8797
Mediatek mt6889
Mediatek mt6985
Mediatek mt6885
Mediatek mt6983
Google android
Mediatek mt8798
Mediatek mt6895
CWE CWE-787
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.0
CPE cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
References (MISC) https://corp.mediatek.com/product-security-bulletin/November-2023 - (MISC) https://corp.mediatek.com/product-security-bulletin/November-2023 - Vendor Advisory

06 Nov 2023, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-06 04:15

Updated : 2024-11-21 08:04


NVD link : CVE-2023-32832

Mitre link : CVE-2023-32832

CVE.ORG link : CVE-2023-32832


JSON object : View

Products Affected

mediatek

  • mt6889
  • mt8798
  • mt6885
  • mt6983
  • mt6893
  • mt8797
  • mt6883
  • mt6895
  • mt6985

google

  • android
CWE
CWE-787

Out-of-bounds Write