CVE-2023-32884

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-328856.7In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with S CVE-2023-328867.5In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with CVE-2023-328877.5In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2023-328887.5In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service wit CVE-2023-328897.5In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service wit CVE-2023-32896.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This r CVE-2023-328907.5In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additio CVE-2023-328916.7In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi CVE-2023-32905.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results CVE-2023-32913.3Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.CVE-2023-32926.1The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attri CVE-2023-32934.8Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0.