CVE-2023-32848: Medium severity android vulnerability
Published Dec 4, 2023
·Updated
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896; Issue ID: ALPS08163896.
Affected Software
14 affected components
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Google Android=13.0
Any of the following
MediaTek Mt6761
MediaTek Mt6763
MediaTek Mt6765
MediaTek Mt6768
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6785
MediaTek Mt6853
MediaTek Mt6873
MediaTek Mt6885
Google Android
Event History
Dec 4, 2023
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·03:45 AM
Data Sourced
via MITRE·03:45 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-32848?
CVE-2023-32848 is a vulnerability in vdec that could allow an attacker to perform an out-of-bounds write, leading to local escalation of privilege.
2
How severe is CVE-2023-32848?
CVE-2023-32848 has a severity score of 7, which is considered high.
3
What software is affected by CVE-2023-32848?
Google Android is the affected software.
4
Is user interaction required to exploit CVE-2023-32848?
No, user interaction is not needed for exploitation of CVE-2023-32848.
5
How can I patch CVE-2023-32848?
To patch CVE-2023-32848, apply the provided patch ID: ALPS08163896.