CVE-2023-20660
In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588383; Issue ID: ALPS07588383.
- Score
- CVSS 3.1 4.4 Medium
- Status
- Modified - security@mediatek.com
- Published
- 2023-04-06
- Last modified
- 2025-03-17
- Weaknesses
- CWE-190
Affected products
- Android (Google)
- Linux Kernel (Linux)
- Mt5221 (Mediatek Inc.)
- Mt6879 (Mediatek Inc.)
- Mt6895 (Mediatek Inc.)
- Mt6983 (Mediatek Inc.)
- Mt7902 (Mediatek Inc.)
- Mt7921 (Mediatek Inc.)
- Mt8167s (Mediatek Inc.)
- Mt8168 (Mediatek Inc.)
- Mt8175 (Mediatek Inc.)
- Mt8362a (Mediatek Inc.)
- Mt8365 (Mediatek Inc.)
- Mt8385 (Mediatek Inc.)
- Mt8518 (Mediatek Inc.)
- Mt8532 (Mediatek Inc.)
- Mt8696 (Mediatek Inc.)
- Mt8766 (Mediatek Inc.)
- Mt8768 (Mediatek Inc.)
- Mt8771 (Mediatek Inc.)
- Mt8781 (Mediatek Inc.)
- Mt8786 (Mediatek Inc.)
- Mt8788 (Mediatek Inc.)
- Mt8789 (Mediatek Inc.)
- Mt8791t (Mediatek Inc.)
- Mt8795t (Mediatek Inc.)
- Mt8797 (Mediatek Inc.)
- Mt8798 (Mediatek Inc.)
- Yocto (Yoctoproject)
References
- https://corp.mediatek.com/product-security-bulletin/April-2023
