{"id":"CVE-2023-32820","aliases":["A-294781433","ASB-A-294781433","EUVD-2023-37041","GHSA-x676-9gf4-jg53","M-ALPS07932637"],"status":"published","title":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This...","description":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00509,"percentile":0.43931,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-617"],"published":"2023-10-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-10-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-10-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"google","product":"android"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"linuxfoundation","product":"yocto"},{"vendor":"mediatek","product":"iot_yocto"},{"vendor":"mediatek","product":"mt5221"},{"vendor":"mediatek","product":"mt6781"},{"vendor":"mediatek","product":"mt6833"},{"vendor":"mediatek","product":"mt6853"},{"vendor":"mediatek","product":"mt6853t"},{"vendor":"mediatek","product":"mt6855"},{"vendor":"mediatek","product":"mt6873"},{"vendor":"mediatek","product":"mt6875"},{"vendor":"mediatek","product":"mt6877"},{"vendor":"mediatek","product":"mt6879"},{"vendor":"mediatek","product":"mt6883"},{"vendor":"mediatek","product":"mt6885"},{"vendor":"mediatek","product":"mt6886"},{"vendor":"mediatek","product":"mt6889"},{"vendor":"mediatek","product":"mt6891"},{"vendor":"mediatek","product":"mt6893"},{"vendor":"mediatek","product":"mt6895"},{"vendor":"mediatek","product":"mt6983"},{"vendor":"mediatek","product":"mt6985"},{"vendor":"mediatek","product":"mt7663"},{"vendor":"mediatek","product":"mt7668"},{"vendor":"mediatek","product":"mt7902"},{"vendor":"mediatek","product":"mt7921"},{"vendor":"mediatek","product":"mt8168"},{"vendor":"mediatek","product":"mt8365"},{"vendor":"mediatek","product":"mt8518s"},{"vendor":"mediatek","product":"mt8532"},{"vendor":"mediatek","product":"mt8666"},{"vendor":"mediatek","product":"mt8673"},{"vendor":"mediatek","product":"mt8675"},{"vendor":"mediatek","product":"mt8695"},{"vendor":"mediatek","product":"mt8766"},{"vendor":"mediatek","product":"mt8768"},{"vendor":"mediatek","product":"mt8781"},{"vendor":"mediatek","product":"mt8786"},{"vendor":"mediatek","product":"mt8789"},{"vendor":"mediatek","product":"mt8791"},{"vendor":"mediatek","product":"mt8797"},{"vendor":"mediatek","product":"mt8798"},{"vendor":"mediatek, inc.","product":"mt5221, mt6781, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt7663, mt7668, mt7902, mt7921, mt8168, mt8365, mt8518s, mt8532, mt8666, mt8673, mt8675, mt8695, mt8766, mt8768, mt8781, mt8786, mt8789, mt8791, mt8797, mt8798"}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/October-2023","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32820"},{"url":"https://github.com/advisories/GHSA-x676-9gf4-jg53"},{"url":"https://source.android.com/security/bulletin/2023-10-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-32820","description":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.","status":"published","published":"2023-10-02T02:05:28.312Z","modified":"2024-09-23T15:27:56.957Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-37041","description":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.","status":"published","published":"2023-10-02T02:05:28Z","modified":"2024-09-23T15:27:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:16.94122Z"}],"ghsa":[{"id":"GHSA-x676-9gf4-jg53","title":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This...","description":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.","status":"published","published":"2023-10-02T03:30:15Z","modified":"2024-09-23T18:30:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-617"],"updated_at":"2026-11-02T14:58:19.257617Z"}],"nvd":[{"id":"CVE-2023-32820","description":"In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637.","status":"published","published":"2023-10-02T03:15:09.823Z","modified":"2026-06-17T05:59:39.343Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-617","CWE-20"],"updated_at":"2026-11-02T14:08:35.022405Z"}],"osv":[{"id":"ASB-A-294781433","status":"published","published":"2023-10-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}