CVE-2023-32807
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Published Sep 4, 2023
Updated: Sep 7, 2023
CWE ID 125
Summary
CVE-2023-32807 is a newly identified vulnerability affecting the wlan service. The issue stems from improper input validation, which in turn creates an opportunity for an out-of-bounds read. With System execution privileges required, this flaw could potentially result in local information disclosure. Notably, user interaction is not necessary for an attacker to exploit this vulnerability. The patch for this issue carries the ID ALPS07588360.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android
Affected Vendors
- Linux Foundation
- Mediatek Inc.