Reachable Assertion in MediaTek products - CVE-2023-32841

Vulnerability identifier: #VU83813

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-32841

CWE-ID: CWE-617

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to improper error handling within 5G Modem. A local application can perform service disruption.

MT6896
MT6886
MT6890
MT6895
MT6895T
MT6897
MT6980
MT6980D
MT6983
MT6985
MT6989
MT6990
MT2735
MT6880
MT6879
MT6875T
MT6855
MT6835
MT6833
MT6815
MT6813
MT6298
MT6297
MT2737
Samsung Mobile Firmware
MT6885
MT6889
MT6891
MT6893
MT6883
MT6877
MT6875
MT6873
MT6853
Google Android

Install security update from vendor's website.

Samsung Mobile Firmware - update to SMR-JAN-2024
Google Android - addressed in versions 11 2024-02-05, 12L 2024-02-05, 12 2024-02-05, 13 2024-02-05, 14 2024-02-05

• https://corp.mediatek.com/product-security-bulletin/December-2023

• Multiple vulnerabilities in MediaTek chipsets
• Multiple vulnerabilities in Samsung Mobile Firmware
• Multiple vulnerabilities in Google Android