CVE-2023-32865: Medium severity android vulnerability

Published Dec 4, 2023

Updated

In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363456; Issue ID: ALPS07363456.

Affected Software

26 affected components

All of the following

Any of the following

Google Android=12.0

Google Android=13.0

Any of the following

MediaTek Mt6761

MediaTek Mt6765

MediaTek Mt6768

MediaTek Mt6779

MediaTek Mt6781

MediaTek Mt6785

MediaTek Mt6789

MediaTek Mt6833

MediaTek Mt6835

MediaTek Mt6853

MediaTek Mt6855

MediaTek Mt6873

MediaTek Mt6877

MediaTek Mt6879

MediaTek Mt6883

MediaTek Mt6885

MediaTek Mt6886

MediaTek Mt6889

MediaTek Mt6893

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt6985

MediaTek Mt8168

MediaTek Mt8781

Event History

Dec 4, 2023

CVE Published

03:46 AM

Data Sourced

03:46 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-32865?

CVE-2023-32865 is a vulnerability in display drm that allows for an out of bounds write due to an incorrect bounds check.

What is the severity of CVE-2023-32865?

CVE-2023-32865 has a severity level of 6.7, which is considered medium.

How can CVE-2023-32865 be exploited?

CVE-2023-32865 can be exploited without user interaction, leading to local escalation of privilege with system execution privileges needed.

Is there a patch available for CVE-2023-32865?

Yes, there is a patch available for CVE-2023-32865 with the Patch ID ALPS07363456 and the Issue ID ALPS07363456.

Where can I find more information about CVE-2023-32865?

You can find more information about CVE-2023-32865 at the following link: [https://corp.mediatek.com/product-security-bulletin/December-2023](https://corp.mediatek.com/product-security-bulletin/December-2023)