In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664741; Issue ID: ALPS07664741.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/July-2023 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Jul 2023, 21:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://corp.mediatek.com/product-security-bulletin/July-2023 - Vendor Advisory | |
| First Time |
Mediatek mt8788
Mediatek mt8385 Mediatek mt8167 Mediatek mt6739 Mediatek mt8365 Google android Linuxfoundation yocto Mediatek mt8765 Mediatek mt8666 Mediatek Linuxfoundation Mediatek mt8321 |
|
| CWE | CWE-190 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
04 Jul 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-04 02:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-20689
Mitre link : CVE-2023-20689
CVE.ORG link : CVE-2023-20689
JSON object : View
Products Affected
mediatek
- mt8385
- mt8365
- mt6739
- mt8765
- mt8321
- mt8666
- mt8167
- mt8788
linuxfoundation
- yocto
- android
CWE
CWE-190
Integer Overflow or Wraparound