Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-32839 EUVD-2023-37060GHSA-hwp3-3266-mxg2

In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege wit…

Published Nov 6, 2023 · Updated Sep 5, 2024 · Assigned by MediaTek

Description

In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262576; Issue ID: ALPS07262576.

Affected products

VendorProductAffectedFixed
MediaTek MT2713, MT6895, MT6983, MT8188, MT8195, MT8673, MT8798 Android 11.0, 12.0 —

References