CVE-2023-32839

Description

In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262576; Issue ID: ALPS07262576.

Reserved 2023-05-16 | Published 2023-11-06 | Updated 2024-09-05 | Assigner MediaTek

Problem types

Elevation of Privilege

Product status

Android 11.0, 12.0
affected

References

corp.mediatek.com/product-security-bulletin/November-2023

cve.org (CVE-2023-32839)

nvd.nist.gov (CVE-2023-32839)

Download JSON