CVE-2023-32849
First published: Mon Dec 04 2023(Updated: )
In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issue ID: ALPS08161758.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Android | =11.0 | |
| Android | =12.0 | |
| Android | =13.0 | |
| Any of | ||
| MediaTek MT6781 | ||
| MediaTek MT6785T | ||
| MediaTek MT6833 | ||
| MediaTek MT6853 | ||
| MediaTek MT6873 | ||
| MediaTek MT6885 | ||
| MediaTek MT6889 | ||
| MediaTek MT6893 | ||
| MediaTek MT8765 | ||
| MediaTek MT8766Z | ||
| MediaTek MT8768 | ||
| MediaTek MT8781 WiFi | ||
| MediaTek MT8786 | ||
| MediaTek MT8788 Firmware | ||
| MediaTek MT8791 WiFi | ||
| MediaTek MT8791T | ||
| MediaTek MT8797 WiFi | ||
| MediaTek MT8798 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-32849.
What is the severity of CVE-2023-32849?
The severity of CVE-2023-32849 is medium.
What software versions are affected by CVE-2023-32849?
Google Android versions 11.0, 12.0, and 13.0 are affected by CVE-2023-32849.
How can CVE-2023-32849 lead to local privilege escalation?
CVE-2023-32849 can lead to local privilege escalation due to type confusion and an out-of-bounds write vulnerability in cmdq.
- agent/type
- agent/event
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/google
- canonical/android
- version/android/11.0
- version/android/12.0
- version/android/13.0
- vendor/mediatek
- canonical/mediatek mt6781
- canonical/mediatek mt6785t
- canonical/mediatek mt6833
- canonical/mediatek mt6853
- canonical/mediatek mt6873
- canonical/mediatek mt6885
- canonical/mediatek mt6889
- canonical/mediatek mt6893
- canonical/mediatek mt8765
- canonical/mediatek mt8766z
- canonical/mediatek mt8768
- canonical/mediatek mt8781 wifi
- canonical/mediatek mt8786
- canonical/mediatek mt8788 firmware
- canonical/mediatek mt8791 wifi
- canonical/mediatek mt8791t
- canonical/mediatek mt8797 wifi
- canonical/mediatek mt8798