Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-32877 EUVD-2023-37098GHSA-8wmq-6cfj-m7w3

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sy…

Published Jan 2, 2024 · Updated Jun 17, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798

Description

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.

Affected products

VendorProductAffectedFixed
MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Android 12.0, 13.0 —

References