VDB

CVE-2023-20747

CVE-2023-20747 PUBLISHED CVSS 4.400000095367432 MEDIUM

In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519103; Issue ID: ALPS07519121.

EPSS 0.09% · 0.6th percentile

Risk Scores

CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.09%
0.6th percentile

Affected Products

VendorProductVersions
linuxfoundationiot-yocto22.2
MediaTek, Inc.MT5696, MT5836, MT5838, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8195, MT8365, MT8781, MT8786, MT8789, MT8791, MT8797, MT9000, MT9015, MT9023, MT9025, MT9618, MT9649, MT9653, MT9679, MT9687, MT9689, MT9902, MT9932, MT9952, MT9972, MT9982Android 12.0, 13.0 / Yocto 4.0 / Iot-Yocto 22.2
googleandroid13.0, 12.0
linuxfoundationyocto4.0

Timeline

  • Jun 6, 2023 CVE Published
  • Jun 7, 2023 EPSS Score
  • Jul 13, 2023 EPSS Score
  • Aug 18, 2023 EPSS Score
  • Sep 22, 2023 EPSS Score
  • Oct 28, 2023 EPSS Score
  • Dec 3, 2023 EPSS Score
  • Jan 8, 2024 EPSS Score
  • Feb 13, 2024 EPSS Score
  • Mar 20, 2024 EPSS Score
  • Apr 24, 2024 EPSS Score
  • May 30, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›