CVE-2023-32866

MEDIUM

Android - Out-of-bounds Write in MMP

Title source: llm
STIX 2.1

Description

In mmp, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342152; Issue ID: ALPS07342152.

References (1)

Core 1

Scores

CVSS v3 6.7
EPSS 0.0003
EPSS Percentile 10.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (3)
google/android 11.0
google/android 12.0
google/android 13.0
Published Dec 04, 2023
Tracked Since Feb 18, 2026