VDB

CVE-2023-20802

CVE-2023-20802 PUBLISHED CVSS 6.5 MEDIUM

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420976.

EPSS 0.10% · 1.0th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.10%
1.0th percentile

Affected Products

VendorProductVersions
mediatekmt8781android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
linuxfoundationyocto4.0
mediatekmt8395android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
mediatekmt6895android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
mediatekmt8188android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
mediatekmt6983android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
mediatekmt8195android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
MediaTek, Inc.MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8781*
mediatekmt6879android_12.0_13.0_IOT_v23.0\/yocto_4.0\/
googleandroid12.0, 13.0

Timeline

  • Aug 7, 2023 EPSS Score
  • Aug 7, 2023 CVE Published
  • Sep 10, 2023 EPSS Score
  • Oct 14, 2023 EPSS Score
  • Nov 16, 2023 EPSS Score
  • Dec 20, 2023 EPSS Score
  • Jan 23, 2024 EPSS Score
  • Feb 26, 2024 EPSS Score
  • Mar 30, 2024 EPSS Score
  • May 3, 2024 EPSS Score
  • Jun 6, 2024 EPSS Score
  • Jul 10, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›