IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.7Orta

CVE-2023-32827

MediaTek, Inc. MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385… Yayım: (3 yıl önce)

Açıklama

In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID: ALPS07993539.

Zayıflık türü (CWE): CWE-787CWE-20

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
google android 12.0, 13.0
mediatek mt6879 0
MediaTek, Inc. MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8673, MT8675, MT8765, MT8766 Android 12.0, 13.0
mediatek mt6886 0
mediatek mt6895 0
mediatek mt6983 0
mediatek mt6985 0
mediatek mt6989 0
mediatek mt8167 0
mediatek mt8167s 0
mediatek mt8168 0
mediatek mt8173 0
mediatek mt8175 0
mediatek mt8185 0
mediatek mt8188 0
mediatek mt8195 0
mediatek mt8321 0
mediatek mt8362a 0
mediatek mt8365 0
mediatek mt8385 0
mediatek mt8390 0
mediatek mt8395 0
mediatek mt8666 0
mediatek mt8673 0
mediatek mt8675 0
mediatek mt8765 0
mediatek mt8766 0
mediatek mt8768 0
mediatek mt8781 0
mediatek mt8786 0
mediatek mt8788 0
mediatek mt8789 0
mediatek mt8791 0
mediatek mt8791t 0
mediatek mt8797 0
mediatek mt8798 0

Kaynaklar ve yamalar

Aynı üründe son açıklar — Android

6.7Orta
CVE-2026-58977
Google Android

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

7.8Yüksek
CVE-2026-58930
Google Android

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, injec…

6.7Orta
CVE-2026-58927
Google Android

The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a …

2.5Düşük
CVE-2026-58926
Google Android

A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using it. This race condition, triggered via `doneWithFrame` and `setMaxFramesInFlight`, enables an attacke…

7.8Yüksek
CVE-2026-58925
Google Android

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigg…

7.5Yüksek
CVE-2026-58924
Google Android

The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within th…