CVEvulnerability
CVE-2023-32829
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190
Description
In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07713478; Issue ID: ALPS07713478.
Affected configurations
• linuxfoundation yocto 3.1
• linuxfoundation yocto 3.3
• linuxfoundation yocto 4.0
• mediatek iot yocto 23.0
• google android 12.0
• google android 13.0
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://corp.mediatek.com/product-security-bulletin/October-2023 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/October-2023 Vendor Advisory