CVE-2023-32830

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-32830
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03802522; Issue ID: DTV03802522.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://corp.mediatek.com/product-security-bulletin/October-2023 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt5527:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5583:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5598:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5599:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5670:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5680:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5691:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5695:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5806:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5813:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5815:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5816:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5833:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt5895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9010:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9011:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9012:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9016:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9020:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9021:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9022:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9215:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9216:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9221:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9222:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9255:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9256:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9266:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9269:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9285:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9286:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9600:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9602:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9610:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9612:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9613:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9615:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9617:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9629:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9630:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9631:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9632:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9633:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9636:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9638:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9639:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9649:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9650:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9652:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9653:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9660:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9666:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9667:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9669:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9670:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9671:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9675:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9679:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9685:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9686:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9688:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9900:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9901:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9931:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9950:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9969:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9970:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9980:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt9981:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2023-10-02 03:15

Updated : 2023-10-03 01:01

NVD link : CVE-2023-32830

Mitre link : CVE-2023-32830

CVE.ORG link : CVE-2023-32830

JSON object : View

Products Affected

mediatek

  • mt9638
  • mt9021
  • mt9650
  • mt9602
  • mt5670
  • mt9636
  • mt9285
  • mt9653
  • mt9660
  • mt9633
  • mt9970
  • mt5833
  • mt5813
  • mt9011
  • mt9901
  • mt9667
  • mt9613
  • mt9685
  • mt5598
  • mt9266
  • mt9931
  • mt9639
  • mt9631
  • mt9010
  • mt9221
  • mt9020
  • mt9016
  • mt5695
  • mt9617
  • mt9679
  • mt9900
  • mt9666
  • mt9969
  • mt5691
  • mt5895
  • mt9630
  • mt5806
  • mt9286
  • mt9215
  • mt9022
  • mt9950
  • mt9649
  • mt5583
  • mt9686
  • mt5599
  • mt9981
  • mt9675
  • mt9980
  • mt5816
  • mt9670
  • mt9610
  • mt9652
  • mt9612
  • mt9632
  • mt9688
  • mt9012
  • mt9255
  • mt9222
  • mt9600
  • mt5680
  • mt5815
  • mt5835
  • mt9615
  • mt9629
  • mt9669
  • mt9671
  • mt5527
  • mt9269
  • mt9216
  • mt9256

google

  • android
CWE
CWE-787

Out-of-bounds Write