CVE-2023-32808: Medium severity android vulnerability

Published Sep 4, 2023

Updated

In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07849751; Issue ID: ALPS07849751.

Affected Software

35 affected components

Google Android=13.0

MediaTek Mt2713

MediaTek Mt6779

MediaTek Mt6781

MediaTek Mt6785

MediaTek Mt6789

MediaTek Mt6833

MediaTek Mt6835

MediaTek Mt6853

MediaTek Mt6855

MediaTek Mt6873

MediaTek Mt6877

MediaTek Mt6879

MediaTek Mt6885

MediaTek Mt6886

MediaTek Mt6889

MediaTek Mt6891

MediaTek Mt6893

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt8168

MediaTek Mt8175

MediaTek Mt8188

MediaTek Mt8195

MediaTek Mt8365

MediaTek Mt8666

MediaTek Mt8667

MediaTek Mt8673

MediaTek Mt8781

MediaTek Mt8781wifi

MediaTek Mt8791

MediaTek Mt8791t

MediaTek Mt8791wifi

MediaTek Mt8797

MediaTek Mt8797wifi

Event History

Sep 4, 2023

CVE Published

via MITRE·02:28 AM

Data Sourced

via MITRE·02:28 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this Bluetooth driver vulnerability?

The vulnerability ID for this Bluetooth driver vulnerability is CVE-2023-32808.

What is the severity of CVE-2023-32808?

The severity of CVE-2023-32808 is medium with a severity score of 4.4.

How does the Bluetooth driver vulnerability CVE-2023-32808 occur?

The Bluetooth driver vulnerability CVE-2023-32808 occurs due to improper access control of the register interface, allowing possible read and write access to registers.

Is user interaction required for exploitation of CVE-2023-32808?

No, user interaction is not needed for exploitation of CVE-2023-32808.

How can I fix the Bluetooth driver vulnerability CVE-2023-32808?

To fix the Bluetooth driver vulnerability CVE-2023-32808, apply the patch ID ALPS07849751 provided by the vendor.