VDB
CVE-2023-32807
CVE-2023-32807
PUBLISHED
CVSS 4.400000095367432 MEDIUM
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.
EPSS 0.10% · 0.7th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
0.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT8167, MT8168, MT8173, MT8183, MT8321, MT8365, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788 | *, Android 13.0 / IOT-v23.0 (Yocto 4.0) |
| linuxfoundation | yocto | 4.0, 4.0 |
| mediatek | iot_yocto | 23.0, 23.0 |
| android | 13.0, 13.0 |
Timeline
- Sep 4, 2023 EPSS Score
- Sep 4, 2023 CVE Published
- Sep 4, 2023 PoC Published
- Oct 7, 2023 EPSS Score
- Nov 9, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 15, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 25, 2024 EPSS Score