Back to feed
EUVD-2023-24966 · Published Aug 7, 2023
In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648734.
Technologies
Mediatek Mt6853Mediatek Mt8365Mediatek Mt6739Google AndroidMediatek Mt6833Mediatek Mt6883Mediatek Mt6785Mediatek Mt6765Mediatek Mt6877Mediatek Mt8167SMediatek Mt6779Mediatek Mt8321Mediatek Mt8167Mediatek Mt6781Mediatek Mt8168Mediatek Mt8362AMediatek Mt6771Mediatek Mt6873Mediatek Mt6761Mediatek Mt6768
Weaknesses
CWE-367CWE-416
CVSS scores
- v3.16.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
