CVEvulnerability
CVE-2023-20663
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190
Description
In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560741; Issue ID: ALPS07560741.
Affected configurations
• google android 12.0
• google android 13.0
• yoctoproject yocto 3.1
• yoctoproject yocto 3.3
• yoctoproject yocto 4.0
• linux linux kernel 4.19
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://corp.mediatek.com/product-security-bulletin/April-2023 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/April-2023 Vendor Advisory