VDB
CVE-2023-20832
CVE-2023-20832
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.
EPSS 0.09% · 0.6th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.09%
0.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mt2735 | 0 |
| mediatek | mt6762 | 0 |
| mediatek | mt6877 | 0 |
| mediatek | mt6779 | 0 |
| mediatek | mt6833 | 0 |
| mediatek | mt8175 | 0 |
| mediatek | mt6769 | 0 |
| mediatek | mt6985 | 0 |
| mediatek | mt6873 | 0 |
| mediatek | mt8168 | 0 |
| mediatek | mt8167s | 0 |
| mediatek | mt8365 | 0 |
| mediatek | mt6765 | 0 |
| mediatek | mt6990 | 0 |
| MediaTek, Inc. | MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8195, MT8362A, MT8365 | Android 12.0, 13.0 / OpenWrt 1907, 2102 / Yocto 2.6 / RDK-B 22Q3 |
| mediatek | mt6835 | 0 |
| android | 13.0, 12.0 | |
| android | 13.0, 12.0 | |
| mediatek | mt8167 | 0 |
| mediatek | mt6890 | 0 |
…and 22 more
Timeline
- Sep 4, 2023 EPSS Score
- Sep 4, 2023 CVE Published
- Oct 7, 2023 EPSS Score
- Nov 9, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 15, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 25, 2024 EPSS Score
- Jul 28, 2024 EPSS Score