VDB

CVE-2023-20800

CVE-2023-20800 PUBLISHED CVSS 6.5 MEDIUM

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955.

EPSS 0.10% · 0.9th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.10%
0.9th percentile

Affected Products

VendorProductVersions
mediatekmt8781android_12, android_13_iot-v23.0_yocto-4.0
mediatekmt6895*, android_12
googleandroid12.0, 13.0
linuxfoundationyocto4.0
MediaTek, Inc.MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8781Android 12.0, 13.0 / IOT-v23.0 (Yocto 4.0)
mediatekmt6983*, *
mediatekmt8395android_12, android_13_iot-v23.0_yocto-4.0
mediatekmt6879android_12, *
mediatekmt8195*, android_13_iot-v23.0_yocto-4.0
mediatekmt8188android_12, android_13_iot-v23.0_yocto-4.0

Timeline

  • Aug 7, 2023 EPSS Score
  • Aug 7, 2023 CVE Published
  • Sep 10, 2023 EPSS Score
  • Oct 14, 2023 EPSS Score
  • Nov 16, 2023 EPSS Score
  • Dec 20, 2023 EPSS Score
  • Jan 23, 2024 EPSS Score
  • Feb 26, 2024 EPSS Score
  • Mar 30, 2024 EPSS Score
  • May 3, 2024 EPSS Score
  • Jun 6, 2024 EPSS Score
  • Jul 10, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›