Out-of-bounds write in MediaTek products - CVE-2023-32830
Published: October 2, 2023
Vulnerability identifier: #VU81358
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-32830
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within TVAPI. A local privileged application can execute arbitrary code.
Affected software
MT9636
MT9666
MT9660
MT9653
MT9652
MT9650
MT9649
MT9639
MT9638
MT9667
MT9633
MT9632
MT9631
MT9630
MT9629
MT9617
MT9615
MT9613
MT9688
MT9981
MT9980
MT9970
MT9969
MT9950
MT9931
MT9901
MT9900
MT9612
MT9686
MT9685
MT9679
MT9675
MT9671
MT9670
MT9669
MT5813
MT9012
MT9011
MT9010
MT5895
MT5835
MT5833
MT5816
MT5815
MT9016
MT5806
MT5695
MT5691
MT5680
MT5670
MT5599
MT5598
MT5583
MT9255
MT9610
MT9602
MT9600
MT9286
MT9285
MT9269
MT9266
MT9256
MT5527
MT9222
MT9221
MT9216
MT9215
MT9022
MT9021
MT9020
MT9666
MT9660
MT9653
MT9652
MT9650
MT9649
MT9639
MT9638
MT9667
MT9633
MT9632
MT9631
MT9630
MT9629
MT9617
MT9615
MT9613
MT9688
MT9981
MT9980
MT9970
MT9969
MT9950
MT9931
MT9901
MT9900
MT9612
MT9686
MT9685
MT9679
MT9675
MT9671
MT9670
MT9669
MT5813
MT9012
MT9011
MT9010
MT5895
MT5835
MT5833
MT5816
MT5815
MT9016
MT5806
MT5695
MT5691
MT5680
MT5670
MT5599
MT5598
MT5583
MT9255
MT9610
MT9602
MT9600
MT9286
MT9285
MT9269
MT9266
MT9256
MT5527
MT9222
MT9221
MT9216
MT9215
MT9022
MT9021
MT9020
How to mitigate CVE-2023-32830
Install security update from vendor's website.