VDB
CVE-2023-32806
CVE-2023-32806
PUBLISHED
CVSS 8.600000381469727 HIGH
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.
EPSS 0.10% · 0.8th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.10%
0.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT6990, MT8168, MT8365, MT8673, MT8766, MT8768, MT8781, MT8786, MT8789, MT8791T, MT8797 | Android 12.0, 13.0 / OpenWrt 21.02 / Yocto 4.0 / IOT-v23.0, Android 12.0, 13.0 / OpenWrt 21.02 / Yocto 4.0 / IOT-v23.0 |
| linuxfoundation | yocto | 4.0, 4.0 |
| openwrt | openwrt | 21.02.0, 21.02.0 |
| android | 13.0, 13.0, 12.0 | |
| mediatek | iot_yocto | 23.0, 23.0 |
| mediatek | mt8797 | IOT-v23.0, Yocto 4.0, Android 13.0 |
Timeline
- Sep 4, 2023 EPSS Score
- Sep 4, 2023 CVE Published
- Sep 4, 2023 PoC Published
- Oct 7, 2023 EPSS Score
- Nov 9, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 15, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 25, 2024 EPSS Score