CVE-2023-32807

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Sep 4, 2023
Updated: Sep 7, 2023
CWE ID 125

Summary

CVE-2023-32807 is a newly identified vulnerability affecting the wlan service. The issue stems from improper input validation, which in turn creates an opportunity for an out-of-bounds read. With System execution privileges required, this flaw could potentially result in local information disclosure. Notably, user interaction is not necessary for an attacker to exploit this vulnerability. The patch for this issue carries the ID ALPS07588360.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Android

Affected Vendors

  • Google
  • Linux Foundation
  • Mediatek Inc.