Vulnerability

CVE-2023-32854

Component: CELLULAR
Location: OS
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

6.7

Severity (Android)

N/A

Chipsets

29

Devices

93

Affected Hardware

NameAlso known asManufacturer
MT8781V/CA
Helio G99
MediaTek
MT8781V/NA
Helio G99
MediaTek
MT6879
Dimensity 1050
MediaTek
MT6879V/ZA
Dimensity 1050
MediaTek
MT6886
Dimensity 7200
MediaTek
MT6895
Dimensity 8000
MediaTek
MT6895Z/CZA
Dimensity 8000
MediaTek
MT6895Z
Dimensity 8100
MediaTek
MT6895Z/TCZA
Dimensity 8100
MediaTek
MT6895ZB
Dimensity 8100
MediaTek
29 of 29 row(s) shown.

Rows per page

Page 1 of 3

Timeline

Introduced (est):
Oct 1, 2021
Reported:
Unknown
Advisory Published:
Dec 4, 2023
CVE Published:
Dec 4, 2023
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter