CVE-2023-32832 Race condition in MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT6985, MT8797, MT8798

High 7.0 Published Updated

A race condition in MediaTek video components allows local attackers to escalate privileges without user interaction or additional execution rights.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2023-32832?

CVE-2023-32832 is a high-severity vulnerability in Google Android, published on 6 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273.

Weakness: CWE-787

Which versions are affected by CVE-2023-32832?

It affects 1 product.

Products include Google Android.

How do I fix CVE-2023-32832?

Apply the vendor's patch.

Is CVE-2023-32832 being exploited?

There is no known exploitation of CVE-2023-32832 in the wild and no public exploit code.

All Google Android vulnerabilities

Sources

Also known as A-298879091, ASB-A-298879091, GHSA-572f-p654-83g9, m-ALPS08235273.

Is CVE-2023-32832 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free