CVE-2023-32854: Medium severity android vulnerability

Published Dec 4, 2023

Updated

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132.

Affected Software

21 affected components

All of the following

Any of the following

Google Android=11.0

Google Android=12.0

Any of the following

MediaTek Mt6835

MediaTek Mt6879

MediaTek Mt6886

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt6985

MediaTek Mt8321

MediaTek Mt8667

MediaTek Mt8673

MediaTek Mt8765

MediaTek Mt8766

MediaTek Mt8768

MediaTek Mt8781

MediaTek Mt8786

MediaTek Mt8788

MediaTek Mt8789

MediaTek Mt8791t

MediaTek Mt8797

MediaTek Mt8798

Event History

Dec 4, 2023

CVE Published

03:45 AM

Data Sourced

03:45 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-32854?

CVE-2023-32854 is a vulnerability in ril that can lead to local escalation of privilege with system execution privileges, without the need for user interaction.

Which software versions are affected by CVE-2023-32854?

CVE-2023-32854 affects Google Android versions 11.0 and 12.0.

How severe is CVE-2023-32854?

CVE-2023-32854 has a severity rating of 6.7, which is considered medium.

What is the patch for CVE-2023-32854?

The patch for CVE-2023-32854 has the ID ALPS08240132.

Where can I find more information on CVE-2023-32854?

You can find more information on CVE-2023-32854 at the following link: [https://corp.mediatek.com/product-security-bulletin/December-2023](https://corp.mediatek.com/product-security-bulletin/December-2023)