CVE-2023-32818 — MediaTek, Inc. / MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6853, MT6873, MT6885

CVE-2023-32818

MediaTek, Inc. / MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6853, MT6873, MT6885 PUBLISHED

Description (CNA)

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896 & ALPS08013430; Issue ID: ALPS07867715.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6853, MT6873, MT6885	affected Android 11.0, 12.0, 13.0

CWE

No CWE identifiers supplied.

References

https://corp.mediatek.com/product-security-bulletin/November-2023

ADP enrichment

CVE

No English description supplied.

https://corp.mediatek.com/product-security-bulletin/November-2023

CISA-ADP

No English description supplied.

No references supplied.