CVE-2023-32843
In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130204; Issue ID: MOLY01130204 (MSV-849).
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - security@mediatek.com
- Published
- 2023-12-04
- Last modified
- 2025-05-29
- Weaknesses
- CWE-617
Affected products
- Nr15 (Mediatek)
- Nr16 (Mediatek)
- Nr17 (Mediatek)
- Mt2735 (Mediatek Inc.)
- Mt2737 (Mediatek Inc.)
- Mt6297 (Mediatek Inc.)
- Mt6298 (Mediatek Inc.)
- Mt6813 (Mediatek Inc.)
- Mt6815 (Mediatek Inc.)
- Mt6833 (Mediatek Inc.)
- Mt6835 (Mediatek Inc.)
- Mt6853 (Mediatek Inc.)
- Mt6855 (Mediatek Inc.)
- Mt6873 (Mediatek Inc.)
- Mt6875 (Mediatek Inc.)
- Mt6875t (Mediatek Inc.)
- Mt6877 (Mediatek Inc.)
- Mt6879 (Mediatek Inc.)
- Mt6880 (Mediatek Inc.)
- Mt6883 (Mediatek Inc.)
- Mt6885 (Mediatek Inc.)
- Mt6886 (Mediatek Inc.)
- Mt6889 (Mediatek Inc.)
- Mt6890 (Mediatek Inc.)
- Mt6891 (Mediatek Inc.)
- Mt6893 (Mediatek Inc.)
- Mt6895 (Mediatek Inc.)
- Mt6895t (Mediatek Inc.)
- Mt6896 (Mediatek Inc.)
- Mt6897 (Mediatek Inc.)
- Mt6980 (Mediatek Inc.)
- Mt6980d (Mediatek Inc.)
- Mt6983 (Mediatek Inc.)
- Mt6985 (Mediatek Inc.)
- Mt6989 (Mediatek Inc.)
- Mt6990 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/December-2023
