VDB

CVE-2023-20787

CVE-2023-20787 PUBLISHED CVSS 6.400000095367432 MEDIUM

In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648734.

EPSS 0.07% · 0.0th percentile

Risk Scores

CVSS 3.1
6.400000095367432
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.07%
0.0th percentile

Affected Products

VendorProductVersions
mediatekmt8167sAndroid 12.0
mediatekmt6873Android 12.0
mediatekmt6785Android 12.0
MediaTek, Inc.MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6883, MT8167, MT8167S, MT8168, MT8321, MT8362A, MT8365Android 12.0
mediatekmt6771Android 12.0
mediatekmt6877Android 12.0
mediatekmt6768Android 12.0
mediatekmt6761Android 12.0
mediatekmt6765Android 12.0
mediatekmt6853Android 12.0
mediatekmt6833*
mediatekmt6739Android 12.0
googleandroid12.0
mediatekmt8362aAndroid 12.0
mediatekmt6781Android 12.0
mediatekmt8365Android 12.0
mediatekmt8168*
mediatekmt6779Android 12.0
mediatekmt8167*
mediatekmt8321Android 12.0

…and 1 more

Timeline

  • Aug 7, 2023 EPSS Score
  • Aug 7, 2023 CVE Published
  • Sep 10, 2023 EPSS Score
  • Oct 13, 2023 EPSS Score
  • Nov 16, 2023 EPSS Score
  • Dec 20, 2023 EPSS Score
  • Jan 23, 2024 EPSS Score
  • Feb 25, 2024 EPSS Score
  • Mar 30, 2024 EPSS Score
  • May 3, 2024 EPSS Score
  • Jun 6, 2024 EPSS Score
  • Jul 9, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›