VDB
CVE-2023-20721
CVE-2023-20721
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07162155; Issue ID: ALPS07162155.
EPSS 0.09% · 0.6th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.09%
0.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| yoctoproject | yocto | 4.0 |
| android | 12.0, 13.0 | |
| MediaTek, Inc. | MT6879, MT6895, MT6983, MT8195, MT8395, MT8673 | Android 12.0, 13.0 / Iot-Yocto 22.2 (Yocto 4.0) |
Timeline
- May 15, 2023 CVE Published
- May 16, 2023 EPSS Score
- Jun 22, 2023 EPSS Score
- Jul 28, 2023 EPSS Score
- Sep 3, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 15, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
- Jan 27, 2024 EPSS Score
- Mar 4, 2024 EPSS Score
- Apr 9, 2024 EPSS Score
- May 16, 2024 EPSS Score