VDB

CVE-2023-32878

CVE-2023-32878 PUBLISHED CVSS 6.900000095367432 MEDIUM

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.

EPSS 0.11% · 1.3th percentile

Risk Scores

CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.11%
1.3th percentile

Affected Products

VendorProductVersions
MediaTek, Inc.MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798Android 12.0, 13.0, *
googleandroid12.0, 13.0, 12.0

Timeline

  • Jan 2, 2024 CVE Published
  • Jan 2, 2024 PoC Published
  • Jan 3, 2024 EPSS Score
  • Jan 3, 2024 PoC Published
  • Jan 22, 2024 PoC Published
  • Feb 1, 2024 EPSS Score
  • Feb 29, 2024 EPSS Score
  • Mar 29, 2024 EPSS Score
  • Apr 26, 2024 EPSS Score
  • May 25, 2024 EPSS Score
  • Jun 23, 2024 EPSS Score
  • Jul 21, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›