6.7
Medium
CVE-2023-20803 In imgsys, there is a possible memory corruption due to improper input validation
Description
In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2713 | Versions not published | |
| mt6879 | Versions not published | |
| mt6895 | Versions not published | |
| mt6983 | Versions not published | |
| mt8188 | Versions not published | |
| mt8195 | Versions not published | |
| mt8395 | Versions not published | |
| mt8673 | Versions not published | |
| Android | 13.0 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | 12.0 | No fix stated |
| yocto | 4.0 | No fix stated |
| MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2713
The 16 CVEs of mt2713 →
CVE-2024-20053
In flashc, there is a possible out of bounds write due to an uncaught exception
8.4
High
CVE-2024-20048
In flashc, there is a possible information disclosure due to an uncaught exception
6.2
Medium
CVE-2024-20041
In da, there is a possible out of bounds read due to a missing bounds check
4.4
Medium
CVE-2024-20040
In wlan firmware, there is a possible out of bounds write due to improper input validation
8.8
High