In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664731; Issue ID: ALPS07664731.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/July-2023 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Jul 2023, 23:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://corp.mediatek.com/product-security-bulletin/July-2023 - Vendor Advisory | |
| CPE | cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* |
|
| CWE | CWE-190 | |
| First Time |
Mediatek mt6739
Mediatek mt8385 Mediatek mt8666 Linuxfoundation Mediatek mt8365 Mediatek mt8321 Linuxfoundation yocto Mediatek mt8788 Mediatek mt8765 Google android Mediatek Mediatek mt8167 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
04 Jul 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-04 02:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20691
Mitre link : CVE-2023-20691
CVE.ORG link : CVE-2023-20691
JSON object : View
Products Affected
mediatek
- mt8765
- mt6739
- mt8167
- mt8666
- mt8365
- mt8385
- mt8321
- mt8788
linuxfoundation
- yocto
- android
CWE
CWE-190
Integer Overflow or Wraparound