CVE-2023-32849
First published: Mon Dec 04 2023(Updated: )
In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issue ID: ALPS08161758.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Google Android | =11.0 | |
| Google Android | =12.0 | |
| Google Android | =13.0 | |
| Any of | ||
| Google Android | ||
| Google Android | ||
| Mediatek Mt6833 | ||
| Mediatek Mt6853 | ||
| Mediatek Mt6873 | ||
| Google Android | ||
| Mediatek Mt6889 | ||
| Mediatek Mt6893 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Mediatek Mt8781 | ||
| Mediatek Mt8786 | ||
| Mediatek Mt8788 | ||
| Mediatek Mt8791 | ||
| Mediatek Mt8791t | ||
| Mediatek Mt8797 | ||
| Mediatek Mt8798 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-32849.
What is the severity of CVE-2023-32849?
The severity of CVE-2023-32849 is medium.
What software versions are affected by CVE-2023-32849?
Google Android versions 11.0, 12.0, and 13.0 are affected by CVE-2023-32849.
How can CVE-2023-32849 lead to local privilege escalation?
CVE-2023-32849 can lead to local privilege escalation due to type confusion and an out-of-bounds write vulnerability in cmdq.
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/references
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google android
- version/google android/11.0
- version/google android/12.0
- version/google android/13.0
- vendor/mediatek
- canonical/mediatek mt6833
- canonical/mediatek mt6853
- canonical/mediatek mt6873
- canonical/mediatek mt6889
- canonical/mediatek mt6893
- canonical/mediatek mt8781
- canonical/mediatek mt8786
- canonical/mediatek mt8788
- canonical/mediatek mt8791
- canonical/mediatek mt8791t
- canonical/mediatek mt8797
- canonical/mediatek mt8798