Skip to content
OpenAdvisories
Unscored CVE-2023-32844 EUVD-2023-37065GHSA-4xvw-5jfq-r7fh

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving ma…

Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689

Description

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01130183 (MSV-850).

Affected products

VendorProductAffectedFixed
MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689 Modem NR15, NR16, and NR17 —

References