CVE-2023-32842

7.5 highEPSS 1.4%

High (7.5) in mediatek. EPSS 1.4% chance of exploitation in the next 30 days.

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01130256; Issue ID: MOLY01130256 (MSV-848).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2023-12-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mediatek:nr15
mediatek:nr16
mediatek:nr17

References

https://corp.mediatek.com/product-security-bulletin/December-2023
https://corp.mediatek.com/product-security-bulletin/December-2023

Check your stack JSON