CVE-2023-32846

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01128524; Issue ID: MOLY01138453 (MSV-861).

• CWE-617

• https://corp.mediatek.com/product-security-bulletin/December-2023Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/December-2023Vendor Advisory

Published

Dec 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32840In modem CCCI, there is a possible out of bounds write due t…6.5
• CVE-2023-32841In 5G Modem, there is a possible system crash due to imprope…7.5
• CVE-2023-32842In 5G Modem, there is a possible system crash due to imprope…7.5
• CVE-2023-32843In 5G Modem, there is a possible system crash due to imprope…7.5
• CVE-2023-32844In 5G Modem, there is a possible system crash due to imprope…7.5
• CVE-2023-32845In 5G Modem, there is a possible system crash due to imprope…7.5
• CVE-2023-32847In audio, there is a possible out of bounds write due to a m…7.8
• CVE-2023-32848In vdec, there is a possible out of bounds write due to type…6.7
• CVE-2023-32849In cmdq, there is a possible out of bounds write due to type…6.7
• CVE-2023-3285A BOLA vulnerability in POST /appointments allows a low priv…7.7
• CVE-2023-32850In decoder, there is a possible out of bounds write due to a…7.8
• CVE-2023-32851In decoder, there is a possible out of bounds write due to a…7.8