6.7 Medium

CVE-2023-20805 In imgsys, there is a possible out of bounds write due to a missing bounds check

Description

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326411.

Affected products and versions

Product	Affected versions	Fixed in
MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673	Versions not published
mt2713	Versions not published
mt6879	Versions not published
mt6895	Versions not published
mt6983	Versions not published
mt8188	Versions not published
mt8195	Versions not published
mt8395	Versions not published
mt8673	Versions not published

Show the 3 other branches

Product	Affected versions	Fixed in
Android	13.0	No fix stated
Android	12.0	No fix stated
yocto	4.0	No fix stated

References

corp.mediatek.com corp.mediatek.com

Timeline

Published August 7, 2023
Last modified October 22, 2024

The 4 CVEs of MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673 →

CVE-2023-20806 In hcp, there is a possible out of bounds write due to a missing bounds check Not rated CVE-2023-20804 In imgsys, there is a possible out of bounds write due to a missing bounds check 6.7 Medium CVE-2023-20803 In imgsys, there is a possible memory corruption due to improper input validation 6.7 Medium

Track this CVE