VDB
CVE-2023-32812
CVE-2023-32812
PUBLISHED
CVSS 8.600000381469727 HIGH
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365.
EPSS 0.10% · 1.0th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.10%
1.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mt8365 | Android 13.0, OpenWrt 1907, OpenWrt 2102 |
| linuxfoundation | yocto | 2.6, 2.6 |
| openwrt | openwrt | 21.02.0, 19.07.0, 21.02.0 |
| android | 13.0, 13.0 | |
| MediaTek, Inc. | MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6895, MT6980, MT6983, MT6985, MT6990, MT8168, MT8175, MT8188, MT8195, MT8365 | *, Android 13.0 / OpenWrt 1907, 2102 / Yocto 2.6 / RDK-B 22Q3 |
Timeline
- Sep 4, 2023 EPSS Score
- Sep 4, 2023 CVE Published
- Oct 7, 2023 EPSS Score
- Nov 9, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 15, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 25, 2024 EPSS Score
- Jul 28, 2024 EPSS Score