CVEvulnerability
CVE-2023-20798
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-125, CWE-131
Description
In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.
Affected configurations
• google android 12.0
• google android 13.0
Related
References
- https://corp.mediatek.com/product-security-bulletin/August-2023 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/August-2023 Vendor Advisory