6.7
Medium
CVE-2023-20829 In gps, there is a possible out of bounds write due to a missing bounds check
Description
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014148.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2735 | Versions not published | |
| mt6761 | Versions not published | |
| mt6762 | Versions not published | |
| mt6765 | Versions not published | |
| mt6768 | Versions not published | |
| mt6769 | Versions not published | |
| mt6779 | Versions not published | |
| mt6833 | Versions not published | |
| mt6835 | Versions not published |
Show the 29 other branches Hide the 29 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6853 | Versions not published | |
| mt6853t | Versions not published | |
| mt6855 | Versions not published | |
| mt6873 | Versions not published | |
| mt6875 | Versions not published | |
| mt6877 | Versions not published | |
| mt6879 | Versions not published | |
| mt6880 | Versions not published | |
| mt6883 | Versions not published | |
| mt6885 | Versions not published | |
| mt6886 | Versions not published | |
| mt6889 | Versions not published | |
| mt6890 | Versions not published | |
| mt6891 | Versions not published | |
| mt6893 | Versions not published | |
| mt6895 | Versions not published | |
| mt6980 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6990 | Versions not published | |
| mt8167 | Versions not published | |
| mt8167s | Versions not published | |
| mt8168 | Versions not published | |
| mt8175 | Versions not published | |
| mt8362a | Versions not published | |
| mt8365 | Versions not published | |
| Android | 13.0 | No fix stated |
| Android | 12.0 | No fix stated |
| MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT... | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2735
The 13 CVEs of mt2735 →
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check
7.5
High
CVE-2024-20082
In Modem, there is a possible memory corruption due to a missing bounds check
9.8
Critical
CVE-2024-20081
In gnss service, there is a possible out of bounds write due to improper input validation
9.8
Critical
CVE-2024-20080
In gnss service, there is a possible escalation of privilege due to improper certificate validation
9.8
Critical