Skip to content
OpenAdvisories
Unscored CVE-2023-32855 EUVD-2023-37076GHSA-3hmq-5gjv-x3xg

In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege wit…

Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6885, MT6889, MT6890, MT6893, MT6895, MT6980, MT6983, MT6985, MT699

Description

In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07909204; Issue ID: ALPS07909204.

Affected products

VendorProductAffectedFixed
MediaTek MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6885, MT6889, MT6890, MT6893, MT6895, MT6980, MT6983, MT6985, MT699 Android 12.0, 13.0 / OpenWrt 1907, 2102 / Yocto 2.6, 3.3, 4.0 / RDK-B 22Q3 —

References