CVEvulnerability
CVE-2023-20796
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-787
Description
In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.
Affected configurations
• linuxfoundation yocto 2.6
• linuxfoundation yocto 3.3
• rdkcentral rdk-b 2022q3
• google android 12.0
• google android 13.0
• openwrt openwrt 19.07.0
• openwrt openwrt 21.02.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://corp.mediatek.com/product-security-bulletin/August-2023 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/August-2023 Vendor Advisory