CVEvulnerability

CVE-2023-32820

7.5 HIGH Published 2023-10-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20, CWE-617

Description

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.

Affected configurations

• linuxfoundation yocto 3.1 • linuxfoundation yocto 3.3 • mediatek iot yocto 23.0 • google android 11.0 • google android 12.0 • google android 13.0 • linux linux kernel 4.19

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-617 Reachable Assertion weakness

References