VDB

CVE-2023-20717

CVE-2023-20717 PUBLISHED CVSS 4.099999904632568 MEDIUM

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185.

EPSS 0.08% · 0.3th percentile

Risk Scores

CVSS 3.1
4.099999904632568
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.08%
0.3th percentile

Affected Products

VendorProductVersions
MediaTek, Inc.MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8175, MT8365, MT8786, MT8789, MT8791T, MT8797*
googleandroid11.0, 12.0, 13.0

Timeline

  • May 15, 2023 CVE Published
  • May 16, 2023 EPSS Score
  • Jun 22, 2023 EPSS Score
  • Jul 28, 2023 EPSS Score
  • Sep 3, 2023 EPSS Score
  • Oct 9, 2023 EPSS Score
  • Nov 15, 2023 EPSS Score
  • Dec 22, 2023 EPSS Score
  • Jan 27, 2024 EPSS Score
  • Mar 4, 2024 EPSS Score
  • Apr 9, 2024 EPSS Score
  • May 16, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›