VDB

CVE-2023-20836

CVE-2023-20836 PUBLISHED CVSS 4.400000095367432 MEDIUM

In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.

EPSS 0.09% · 0.5th percentile

Risk Scores

CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.09%
0.5th percentile

Affected Products

VendorProductVersions
MediaTek, Inc.MT6762, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6877, MT6885, MT6893, MT8768, MT8788Android 11.0, 12.0, 13.0
googleandroid11.0, 12.0, 13.0

Timeline

  • Sep 4, 2023 EPSS Score
  • Sep 4, 2023 CVE Published
  • Oct 7, 2023 EPSS Score
  • Nov 9, 2023 EPSS Score
  • Dec 11, 2023 EPSS Score
  • Jan 13, 2024 EPSS Score
  • Feb 15, 2024 EPSS Score
  • Mar 19, 2024 EPSS Score
  • Apr 21, 2024 EPSS Score
  • May 23, 2024 EPSS Score
  • Jun 25, 2024 EPSS Score
  • Jul 28, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›