2023-10-02 04:00:28 +00:00
{
"id" : "CVE-2023-32829" ,
"sourceIdentifier" : "security@mediatek.com" ,
"published" : "2023-10-02T03:15:10.183" ,
2024-09-21 18:03:16 +00:00
"lastModified" : "2024-09-21T16:35:05.837" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-10-02 04:00:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07713478; Issue ID: ALPS07713478."
2023-10-03 02:00:29 +00:00
} ,
{
"lang" : "es" ,
2024-04-04 08:46:00 +00:00
"value" : "En apusys, existe una posible escritura fuera de l\u00edmites debido a un desbordamiento de enteros. Esto podr\u00eda conducir a una escalada local de privilegios con permisos de ejecuci\u00f3n de System necesarios. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS07713478; ID del problema: ALPS07713478."
2023-10-03 02:00:29 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.7 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 5.9
2024-09-21 18:03:16 +00:00
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.7 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 5.9
2023-10-03 02:00:29 +00:00
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-190"
}
]
2024-09-21 18:03:16 +00:00
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-190"
}
]
2023-10-03 02:00:29 +00:00
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:linuxfoundation:yocto:3.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B2EECB3C-723A-492D-A6D7-6A1A73EDBFDF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:linuxfoundation:yocto:3.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2385F2C9-3EA1-424B-AB8D-A672BF1CBE56"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "437D8F9D-67DF-47A5-9C96-5B51D1562951"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3C9ED712-53EF-4AF7-AB45-A87B50F6BE16"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8137:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E3E832CB-1FEB-4E32-B675-6CC49E4A8024"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8139:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "14C5DB83-B705-4B2C-916E-4B67C0D9FBAB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8195z:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9B3A37B9-F500-4B3C-B77C-B2BD7B015154"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
}
]
}
]
2023-10-02 04:00:28 +00:00
}
] ,
"references" : [
{
"url" : "https://corp.mediatek.com/product-security-bulletin/October-2023" ,
2023-10-03 02:00:29 +00:00
"source" : "security@mediatek.com" ,
"tags" : [
"Vendor Advisory"
]
2023-10-02 04:00:28 +00:00
}
]
}
