← Back

CVE-2023-32829

nvd nist
Published: Oct 2, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07713478; Issue ID: ALPS07713478.

Affected (6)

Google
1 product
Android
Linuxfoundation
1 product
Yocto
Mediatek
1 product
Iot Yocto
Configuration A
6 vulnerable · 14 platform
Vulnerable SoftwareAffected Versions
Google
Android
Version 12.0
Android
Version 13.0
Linuxfoundation
Yocto
Version 3.1
Yocto
Version 3.3
Yocto
Version 4.0
Iot Yocto
Version 23.0
Running on/withPlatform Versions
Mediatek
Mt6879
All versions
Mediatek
Mt6886
All versions
Mediatek
Mt6891
All versions
Mediatek
Mt6895
All versions
Mediatek
Mt6896
All versions
Mediatek
Mt6983
All versions
Mediatek
Mt6985
All versions
Mediatek
Mt8137
All versions
Mediatek
Mt8139
All versions
Mediatek
Mt8188
All versions
Mediatek
Mt8195
All versions
Mediatek
Mt8195z
All versions
Mediatek
Mt8390
All versions
Mediatek
Mt8395
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: security@mediatek.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.