CVE-2023-32843: high-severity vulnerability in MediaTek, Inc. MT2735, MT2737, MT6297, MT6298…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A 5G modem can crash when it receives specially crafted network messages because it doesn't properly handle errors. An attacker can remotely cause this crash without needing special access or user action, disrupting the device's connectivity.
The 5G modem lacks proper error handling for malformed RRC (Radio Resource Control) messages, allowing a remote attacker to trigger a system crash via a network-based vector without elevated privileges or user interaction. The vulnerability results in denial of service by making the modem unresponsive.
In the same product, most dangerous first.