CVE-2023-32849: Medium severity android vulnerability
Published Dec 4, 2023
·Updated
In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issue ID: ALPS08161758.
Affected Software
21 affected components
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Google Android=13.0
Any of the following
MediaTek Mt6781
MediaTek Mt6785
MediaTek Mt6833
MediaTek Mt6853
MediaTek Mt6873
MediaTek Mt6885
MediaTek Mt6889
MediaTek Mt6893
MediaTek Mt8765
MediaTek Mt8766
MediaTek Mt8768
MediaTek Mt8781
MediaTek Mt8786
MediaTek Mt8788
MediaTek Mt8791
MediaTek Mt8791t
MediaTek Mt8797
MediaTek Mt8798
Event History
Dec 4, 2023
CVE Published
03:45 AM
Data Sourced
03:45 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-32849.
2
What is the severity of CVE-2023-32849?
The severity of CVE-2023-32849 is medium.
3
What software versions are affected by CVE-2023-32849?
Google Android versions 11.0, 12.0, and 13.0 are affected by CVE-2023-32849.
4
How can CVE-2023-32849 lead to local privilege escalation?
CVE-2023-32849 can lead to local privilege escalation due to type confusion and an out-of-bounds write vulnerability in cmdq.