IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.7Medium

CVE-2023-32822

MediaTek, Inc. MT2713, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6833, MT6835, MT6855, MT6877, MT6879, MT6883, MT6885, MT6886, … Published: (3 years ago)

Description

In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07994229; Issue ID: ALPS07994229.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
google android 12.0, 13.0
mediatek mt2713 0
MediaTek, Inc. MT2713, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6833, MT6835, MT6855, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6985, MT8167, MT8167S, Android 12.0, 13.0
mediatek mt6739 0
mediatek mt6761 0
mediatek mt6762 0
mediatek mt6765 0
mediatek mt6768 0
mediatek mt6769 0
mediatek mt6771 0
mediatek mt6779 0
mediatek mt6781 0
mediatek mt6833 0
mediatek mt6835 0
mediatek mt6855 0
mediatek mt6877 0
mediatek mt6879 0
mediatek mt6883 0
mediatek mt6885 0
mediatek mt6886 0
mediatek mt6889 0
mediatek mt6891 0
mediatek mt6893 0
mediatek mt6895 0
mediatek mt6985 0
mediatek mt8167 0
mediatek mt8167s 0
mediatek mt8168 0
mediatek mt8175 0
mediatek mt8188 0
mediatek mt8195 0
mediatek mt8321 0
mediatek mt8362a 0
mediatek mt8365 0
mediatek mt8385 0
mediatek mt8390 0
mediatek mt8765 0
mediatek mt8766 0
mediatek mt8768 0
mediatek mt8781 0
mediatek mt8786 0
mediatek mt8788 0
mediatek mt8789 0
mediatek mt8791 0
mediatek mt8797 0
mediatek mt8798 0

References and patches

Recent CVEs in the same product — Android

6.7Medium
CVE-2026-56952
Google Android

In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

6.8Medium
CVE-2026-56936
Google Android

In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.0High
CVE-2026-56906
Google Android

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

9.8Critical
CVE-2026-55330
Google Android

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-55307
Google Android

In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-0198
Google Android

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.