Lucene search
MediaTekCVE-2023-20690HistoryJul 04, 2023 - 2:15 a.m.
CVE-2023-20690
2023-07-0402:15:09
CWE-190
MediaTek
web.nvd.nist.gov
12
cve-2023-20690
wlan firmware
integer overflow
system crash
denial of service
nvd
patch
alps07664735
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
45.7%
In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664735; Issue ID: ALPS07664735.
Affected configurations
Node
linuxfoundationyoctoMatch4.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
mediatekmt6739Match-
ORmediatekmt8167Match-
ORmediatekmt8168Match-
ORmediatekmt8321Match-
ORmediatekmt8365Match-
ORmediatekmt8385Match-
ORmediatekmt8666Match-
ORmediatekmt8765Match-
ORmediatekmt8788Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linuxfoundation | yocto | 4.0 | cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* |
| android | 11.0 | cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | |
| android | 12.0 | cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | |
| mediatek | mt6739 | - | cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:* |
| mediatek | mt8167 | - | cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:* |
| mediatek | mt8168 | - | cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:* |
| mediatek | mt8321 | - | cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:* |
| mediatek | mt8365 | - | cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* |
| mediatek | mt8385 | - | cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* |
| mediatek | mt8666 | - | cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT8666, MT8765, MT8788",
"versions": [
{
"version": "Android 11.0, 12.0 / IOT-v23.0 (Yocto 4.0)",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-20690
2023-07-04 02:15:09
prion
prion
Integer overflow
2023-07-04 02:15:00
cvelist
cvelist
CVE-2023-20690
2023-07-04 01:44:48
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
45.7%
Related for CVE-2023-20690