Lucene search

K
nvd[email protected]NVD:CVE-2023-20803
HistoryAug 07, 2023 - 4:15 a.m.

CVE-2023-20803

2023-08-0704:15:13
CWE-787
web.nvd.nist.gov
imgsys
memory corruption
local privilege escalation
input validation

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.

Affected configurations

NVD
Node
linuxfoundationyoctoMatch4.0
OR
googleandroidMatch12.0
OR
googleandroidMatch13.0
AND
mediatekmt2713Match-
OR
mediatekmt6879Match-
OR
mediatekmt6895Match-
OR
mediatekmt6983Match-
OR
mediatekmt8188Match-
OR
mediatekmt8195Match-
OR
mediatekmt8395Match-
OR
mediatekmt8673Match-

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2023-20803