CVE-2023-32837: High severity android vulnerability

Published Nov 6, 2023

Updated

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357.

Affected Software

8 affected components

Google Android

All of the following

Google Android=12.0

Any of the following

MediaTek Mt6883

MediaTek Mt6885

MediaTek Mt6889

MediaTek Mt6893

MediaTek Mt8797

MediaTek Mt8798

Event History

Nov 6, 2023

CVE Published

via Android·12:00 AM

CVE Published

via MITRE·03:50 AM

Data Sourced

via MITRE·03:50 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-32837?

CVE-2023-32837 is a vulnerability in video that allows for a possible out of bounds write due to a missing bounds check, leading to local escalation of privilege without requiring additional execution privileges.

How does CVE-2023-32837 affect Google Android?

CVE-2023-32837 affects Google Android version 12.0, allowing for a possible out of bounds write vulnerability.

Is Mediatek Mt6883 vulnerable to CVE-2023-32837?

No, Mediatek Mt6883 is not vulnerable to CVE-2023-32837.

What is the severity of CVE-2023-32837?

The severity of CVE-2023-32837 is high with a severity value of 7.8.

How can I patch CVE-2023-32837?

To patch CVE-2023-32837, refer to the official patch ID ALPS08235273 or the vendor's product security bulletin for more information.