6.7

CVE-2023-32884

In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011.

Data is provided by the National Vulnerability Database (NVD)
GoogleAndroid Version12.0
   MediatekMt2713 Version-
   MediatekMt6580 Version-
   MediatekMt6739 Version-
   MediatekMt6761 Version-
   MediatekMt6765 Version-
   MediatekMt6768 Version-
   MediatekMt6779 Version-
   MediatekMt6781 Version-
   MediatekMt6785 Version-
   MediatekMt6789 Version-
   MediatekMt6833 Version-
   MediatekMt6835 Version-
   MediatekMt6853 Version-
   MediatekMt6855 Version-
   MediatekMt6873 Version-
   MediatekMt6877 Version-
   MediatekMt6879 Version-
   MediatekMt6883 Version-
   MediatekMt6885 Version-
   MediatekMt6886 Version-
   MediatekMt6889 Version-
   MediatekMt6893 Version-
   MediatekMt6895 Version-
   MediatekMt6983 Version-
   MediatekMt6985 Version-
   MediatekMt8167 Version-
   MediatekMt8167s Version-
   MediatekMt8168 Version-
   MediatekMt8173 Version-
   MediatekMt8175 Version-
   MediatekMt8188 Version-
   MediatekMt8192 Version-
   MediatekMt8195 Version-
   MediatekMt8195z Version-
   MediatekMt8321 Version-
   MediatekMt8362a Version-
   MediatekMt8365 Version-
   MediatekMt8385 Version-
   MediatekMt8395 Version-
   MediatekMt8666 Version-
   MediatekMt8667 Version-
   MediatekMt8673 Version-
   MediatekMt8696 Version-
   MediatekMt8755 Version-
   MediatekMt8765 Version-
   MediatekMt8766 Version-
   MediatekMt8768 Version-
   MediatekMt8771 Version-
   MediatekMt8775 Version-
   MediatekMt8781 Version-
   MediatekMt8786 Version-
   MediatekMt8788 Version-
   MediatekMt8789 Version-
   MediatekMt8791 Version-
   MediatekMt8791t Version-
   MediatekMt8795t Version-
   MediatekMt8797 Version-
   MediatekMt8798 Version-
   MediatekMt8871 Version-
GoogleAndroid Version13.0
   MediatekMt2713 Version-
   MediatekMt6580 Version-
   MediatekMt6739 Version-
   MediatekMt6761 Version-
   MediatekMt6765 Version-
   MediatekMt6768 Version-
   MediatekMt6779 Version-
   MediatekMt6781 Version-
   MediatekMt6785 Version-
   MediatekMt6789 Version-
   MediatekMt6833 Version-
   MediatekMt6835 Version-
   MediatekMt6853 Version-
   MediatekMt6855 Version-
   MediatekMt6873 Version-
   MediatekMt6877 Version-
   MediatekMt6879 Version-
   MediatekMt6883 Version-
   MediatekMt6885 Version-
   MediatekMt6886 Version-
   MediatekMt6889 Version-
   MediatekMt6893 Version-
   MediatekMt6895 Version-
   MediatekMt6983 Version-
   MediatekMt6985 Version-
   MediatekMt8167 Version-
   MediatekMt8167s Version-
   MediatekMt8168 Version-
   MediatekMt8173 Version-
   MediatekMt8175 Version-
   MediatekMt8188 Version-
   MediatekMt8192 Version-
   MediatekMt8195 Version-
   MediatekMt8195z Version-
   MediatekMt8321 Version-
   MediatekMt8362a Version-
   MediatekMt8365 Version-
   MediatekMt8385 Version-
   MediatekMt8395 Version-
   MediatekMt8666 Version-
   MediatekMt8667 Version-
   MediatekMt8673 Version-
   MediatekMt8696 Version-
   MediatekMt8755 Version-
   MediatekMt8765 Version-
   MediatekMt8766 Version-
   MediatekMt8768 Version-
   MediatekMt8771 Version-
   MediatekMt8775 Version-
   MediatekMt8781 Version-
   MediatekMt8786 Version-
   MediatekMt8788 Version-
   MediatekMt8789 Version-
   MediatekMt8791 Version-
   MediatekMt8791t Version-
   MediatekMt8795t Version-
   MediatekMt8797 Version-
   MediatekMt8798 Version-
   MediatekMt8871 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.041
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.