In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use…
6.7Media
CVE-2023-32824
Descripción
In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961.
Debilidad (CWE):
CWE-415
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| android | 12.0, 13.0 | ||
| mediatek | mt6580 | 0 | |
| MediaTek, Inc. | MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, | Android 12.0, 13.0 | |
| mediatek | mt6739 | 0 | |
| mediatek | mt6761 | 0 | |
| mediatek | mt6762 | 0 | |
| mediatek | mt6765 | 0 | |
| mediatek | mt6768 | 0 | |
| mediatek | mt6769 | 0 | |
| mediatek | mt6779 | 0 | |
| mediatek | mt6781 | 0 | |
| mediatek | mt6785 | 0 | |
| mediatek | mt6789 | 0 | |
| mediatek | mt6833 | 0 | |
| mediatek | mt6853 | 0 | |
| mediatek | mt6853t | 0 | |
| mediatek | mt6855 | 0 | |
| mediatek | mt6873 | 0 | |
| mediatek | mt6875 | 0 | |
| mediatek | mt6877 | 0 | |
| mediatek | mt6879 | 0 | |
| mediatek | mt6883 | 0 | |
| mediatek | mt6885 | 0 | |
| mediatek | mt6889 | 0 | |
| mediatek | mt6891 | 0 | |
| mediatek | mt6893 | 0 | |
| mediatek | mt6895 | 0 | |
| mediatek | mt6983 | 0 | |
| mediatek | mt6985 | 0 | |
| mediatek | mt8666 | 0 | |
| mediatek | mt8765 | 0 | |
| mediatek | mt8788 | 0 |