CVE-2023-32891

In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559.

• CWE-787
• CWE-787

• https://corp.mediatek.com/product-security-bulletin/January-2024Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/January-2024Vendor Advisory

Published

Jan 2, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32886In Modem IMS SMS UA, there is a possible out of bounds write…7.5
• CVE-2023-32887In Modem IMS Stack, there is a possible system crash due to …7.5
• CVE-2023-32888In Modem IMS Call UA, there is a possible out of bounds writ…7.5
• CVE-2023-32889In Modem IMS Call UA, there is a possible out of bounds writ…7.5
• CVE-2023-3289A BOLA vulnerability in POST /services allows a low privileg…6.5
• CVE-2023-32890In modem EMM, there is a possible system crash due to improp…7.5
• CVE-2023-3290A BOLA vulnerability in POST /customers allows a low privile…5
• CVE-2023-3291Heap-based Buffer Overflow in GitHub repository gpac/gpac pr…3.3
• CVE-2023-3292The grid-kit-premium WordPress plugin before 2.2.0 does not …6.1
• CVE-2023-3293Cross-site Scripting (XSS) - Stored in GitHub repository sal…4.8
• CVE-2023-3294Cross-site Scripting (XSS) - DOM in GitHub repository saleor…6.1
• CVE-2023-3295The Unlimited Elements For Elementor (Free Widgets, Addons, …8.8