Skip to content
OpenAdvisories
Unscored CVE-2023-32810 EUVD-2023-37031GHSA-pg89-r7j3-c3wg

In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak wit…

Published Sep 4, 2023 · Updated Aug 2, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2713, MT5221, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6890, MT6893, MT6895, MT6983, MT8167, MT8168, MT8173, MT8175, MT8185, MT8188, MT8188T, MT8195, MT8321, MT836

Description

In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.

Affected products

VendorProductAffectedFixed
MediaTek MT2713, MT5221, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6890, MT6893, MT6895, MT6983, MT8167, MT8168, MT8173, MT8175, MT8185, MT8188, MT8188T, MT8195, MT8321, MT836 Android 12.0, 13.0 / RDK-B 22Q3 / Linux4.19 / Yocto 3.1, 3.3, 4.0 —

References