ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2023-32890
7.5высокая

CVE-2023-32890

Описание

In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).

Затрагиваемое ПО
Mediatek Lr13Mediatek Nr15Mediatek Nr16Mediatek Nr17Mediatek Mt2735Mediatek Mt6779Mediatek Mt6781Mediatek Mt6783Mediatek Mt6785Mediatek Mt6785tMediatek Mt6789Mediatek Mt6813Mediatek Mt6833Mediatek Mt6833pMediatek Mt6835Mediatek Mt6853Mediatek Mt6853tMediatek Mt6855Mediatek Mt6873Mediatek Mt6875Mediatek Mt6877Mediatek Mt6877tMediatek Mt6878Mediatek Mt6879Mediatek Mt6880
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Источники
https://corp.mediatek.com/product-security-bulletin/April-2024https://corp.mediatek.com/product-security-bulletin/April-2024