CVE-2023-32861

Status: ModifiedMedium (6.7)—
In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081.
CVSS

Version: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base score: 6.7
Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.11%
Percentile among all scored CVEs: 1
Score date: 10/10/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)

Google — Android
CWEs

CWE-125
References

Raw JSON (NVD)

Show
{
  "id": "CVE-2023-32861",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-32861",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2023-12-06T20:49:47.419651Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@mediatek.com",
      "affectedData": [
        {
          "vendor": "MediaTek, Inc.",
          "product": "MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8167, MT8168, MT8188, MT8195, MT8673",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0, 13.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-12-04T04:15:08.353",
  "references": [
    {
      "url": "https://corp.mediatek.com/product-security-bulletin/December-2023",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@mediatek.com"
    },
    {
      "url": "https://corp.mediatek.com/product-security-bulletin/December-2023",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081."
    },
    {
      "lang": "es",
      "value": "En display, hay una posible lectura fuera de los límites debido a una verificación de los límites incorrecta. Esto podría conducir a una escalada local de privilegios con permisos de ejecución de System necesarios. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS08059081; ID del problema: ALPS08059081."
    }
  ],
  "lastModified": "2026-06-17T05:59:48.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
            },
            {
              "criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F726F486-A86F-4215-AD93-7A07A071844A"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A82E0A4F-072F-474C-B94C-8114ABE05639"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DD64413C-C774-4C4F-9551-89E1AA9469EE"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "213B5C7F-D965-4312-9CDF-4F06FA77D401"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3CE2FC35-716A-4706-97BA-5DB165041580"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6"
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "152F6606-FA23-4530-AA07-419866B74CB3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@mediatek.com"
}