CVE-2023-32820

HIGH

Yocto - Remote Denial of Service via Improper Input Handling

Title source: llm

Description

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.

References (1)

Core 1

Core References

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/October-2023

Scores

CVSS v3 7.5

EPSS 0.0041

EPSS Percentile 32.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-20 CWE-617

Status published

Products (7)

google/android 11.0

google/android 12.0

google/android 13.0

linux/linux_kernel 4.19

linuxfoundation/yocto 3.1

linuxfoundation/yocto 3.3

mediatek/iot_yocto 23.0

Published Oct 02, 2023

Tracked Since Feb 18, 2026