CVE-2023-20626

2023-03-0700:00:00

MediaTek

www.cve.org

msdc

out of bounds write

local privilege escalation

patch alps07405223

issue alps07405223

0.0004 Low

EPSS

Percentile

5.1%

JSON

In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223.

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8785, MT8789, MT8791, MT8797",
    "versions": [
      {
        "version": "Android 10.0, 11.0, 12.0",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/March-2023

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-20626