CVE-2023-20741

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628591; Issue ID: ALPS07628606.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/June-2023	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*

OR	cpe:2.3:h:mediatek:mt6735:-:::::::*
	cpe:2.3:h:mediatek:mt6737:-:::::::*
	cpe:2.3:h:mediatek:mt6739:-:::::::*
	cpe:2.3:h:mediatek:mt6753:-:::::::*
	cpe:2.3:h:mediatek:mt6757:-:::::::*
	cpe:2.3:h:mediatek:mt6757c:-:::::::*
	cpe:2.3:h:mediatek:mt6757cd:-:::::::*
	cpe:2.3:h:mediatek:mt6757ch:-:::::::*
	cpe:2.3:h:mediatek:mt6761:-:::::::*
	cpe:2.3:h:mediatek:mt6762:-:::::::*
	cpe:2.3:h:mediatek:mt6763:-:::::::*
	cpe:2.3:h:mediatek:mt6765:-:::::::*
	cpe:2.3:h:mediatek:mt6768:-:::::::*
	cpe:2.3:h:mediatek:mt6769:-:::::::*
	cpe:2.3:h:mediatek:mt6771:-:::::::*
	cpe:2.3:h:mediatek:mt6779:-:::::::*
	cpe:2.3:h:mediatek:mt6781:-:::::::*
	cpe:2.3:h:mediatek:mt6785:-:::::::*
	cpe:2.3:h:mediatek:mt6789:-:::::::*
	cpe:2.3:h:mediatek:mt6833:-:::::::*
	cpe:2.3:h:mediatek:mt6835:-:::::::*
	cpe:2.3:h:mediatek:mt6853:-:::::::*
	cpe:2.3:h:mediatek:mt6853t:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6873:-:::::::*
	cpe:2.3:h:mediatek:mt6875:-:::::::*
	cpe:2.3:h:mediatek:mt6877:-:::::::*
	cpe:2.3:h:mediatek:mt6879:-:::::::*
	cpe:2.3:h:mediatek:mt6883:-:::::::*
	cpe:2.3:h:mediatek:mt6885:-:::::::*
	cpe:2.3:h:mediatek:mt6886:-:::::::*
	cpe:2.3:h:mediatek:mt6889:-:::::::*
	cpe:2.3:h:mediatek:mt6891:-:::::::*
	cpe:2.3:h:mediatek:mt6893:-:::::::*
	cpe:2.3:h:mediatek:mt6895:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt8321:-:::::::*
	cpe:2.3:h:mediatek:mt8765:-:::::::*
	cpe:2.3:h:mediatek:mt8766:-:::::::*
	cpe:2.3:h:mediatek:mt8768:-:::::::*
	cpe:2.3:h:mediatek:mt8781:-:::::::*
	cpe:2.3:h:mediatek:mt8786:-:::::::*
	cpe:2.3:h:mediatek:mt8788:-:::::::*
	cpe:2.3:h:mediatek:mt8789:-:::::::*
	cpe:2.3:h:mediatek:mt8791t:-:::::::*
	cpe:2.3:h:mediatek:mt8797:-:::::::*

History

09 Jun 2023, 03:53

Type	Values Removed	Values Added
CWE		CWE-125
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.4
CPE		cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:h:mediatek:mt6735:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt6883:-:::::::* cpe:2.3:h:mediatek:mt6833:-:::::::* cpe:2.3:h:mediatek:mt6889:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:h:mediatek:mt6769:-:::::::* cpe:2.3:h:mediatek:mt6771:-:::::::* cpe:2.3:h:mediatek:mt6893:-:::::::* cpe:2.3:h:mediatek:mt6757ch:-:::::::* cpe:2.3:h:mediatek:mt8321:-:::::::* cpe:2.3:h:mediatek:mt6891:-:::::::* cpe:2.3:h:mediatek:mt6765:-:::::::* cpe:2.3:h:mediatek:mt6853:-:::::::* cpe:2.3:h:mediatek:mt6853t:-:::::::* cpe:2.3:h:mediatek:mt6785:-:::::::* cpe:2.3:h:mediatek:mt6885:-:::::::* cpe:2.3:h:mediatek:mt6753:-:::::::* cpe:2.3:h:mediatek:mt6757c:-:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6762:-:::::::* cpe:2.3:h:mediatek:mt6835:-:::::::* cpe:2.3:h:mediatek:mt6761:-:::::::* cpe:2.3:h:mediatek:mt6779:-:::::::* cpe:2.3:h:mediatek:mt6757cd:-:::::::* cpe:2.3:h:mediatek:mt8788:-:::::::* cpe:2.3:h:mediatek:mt8797:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt6763:-:::::::* cpe:2.3:h:mediatek:mt6737:-:::::::* cpe:2.3:h:mediatek:mt6757:-:::::::* cpe:2.3:h:mediatek:mt8789:-:::::::* cpe:2.3:h:mediatek:mt8766:-:::::::* cpe:2.3:h:mediatek:mt6875:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:h:mediatek:mt6877:-:::::::* cpe:2.3:h:mediatek:mt8791t:-:::::::* cpe:2.3:h:mediatek:mt6768:-:::::::* cpe:2.3:h:mediatek:mt8786:-:::::::* cpe:2.3:h:mediatek:mt6873:-:::::::* cpe:2.3:h:mediatek:mt8781:-:::::::* cpe:2.3:h:mediatek:mt6739:-:::::::* cpe:2.3:h:mediatek:mt8765:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:h:mediatek:mt8768:-:::::::*
References	~~(MISC) https://corp.mediatek.com/product-security-bulletin/June-2023 -~~	(MISC) https://corp.mediatek.com/product-security-bulletin/June-2023 - Vendor Advisory
First Time		Mediatek mt6781 Mediatek mt6769 Mediatek mt6873 Mediatek mt6757 Mediatek mt6877 Mediatek mt8791t Mediatek mt6885 Mediatek mt6895 Mediatek mt6883 Mediatek mt6893 Google Mediatek mt8766 Mediatek mt6886 Mediatek mt6762 Mediatek mt8797 Mediatek mt6761 Mediatek mt6735 Mediatek mt6763 Google android Mediatek mt6779 Mediatek mt8768 Mediatek mt6889 Mediatek mt8781 Mediatek mt8765 Mediatek mt6737 Mediatek mt6879 Mediatek mt6757cd Mediatek mt6835 Mediatek mt6983 Mediatek mt8788 Mediatek mt8321 Mediatek mt6855 Mediatek mt6875 Mediatek mt6853t Mediatek mt6833 Mediatek mt8786 Mediatek mt6739 Mediatek mt6785 Mediatek mt6753 Mediatek mt6853 Mediatek mt6757ch Mediatek mt8789 Mediatek mt6789 Mediatek mt6985 Mediatek mt6757c Mediatek mt6768 Mediatek Mediatek mt6771 Mediatek mt6765 Mediatek mt6891

06 Jun 2023, 13:36

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-06-06 13:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-20741

Mitre link : CVE-2023-20741

CVE.ORG link : CVE-2023-20741

JSON object : View

Products Affected

mediatek

mt6895
mt6779
mt6835
mt6853
mt6757ch
mt6781
mt6769
mt8781
mt8765
mt6771
mt6877
mt8321
mt6785
mt6985
mt6833
mt8797
mt6891
mt6983
mt8768
mt6762
mt6883
mt8766
mt6875
mt6737
mt6753
mt6853t
mt6873
mt6879
mt6893
mt6757
mt8786
mt6889
mt6761
mt8788
mt6739
mt6855
mt6789
mt6885
mt6757c
mt6765
mt6768
mt6757cd
mt6886
mt6735
mt6763
mt8789
mt8791t

google

android

CWE

CWE-125

Out-of-bounds Read

4.4 /10