CVE-2023-20694

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only).

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/May-2023	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:openwrt:openwrt:19.07.0:-::::::
	cpe:2.3:o:openwrt:openwrt:21.02.0:-::::::

OR	cpe:2.3:h:mediatek:mt6580:-:::::::*
	cpe:2.3:h:mediatek:mt6739:-:::::::*
	cpe:2.3:h:mediatek:mt6761:-:::::::*
	cpe:2.3:h:mediatek:mt6765:-:::::::*
	cpe:2.3:h:mediatek:mt6768:-:::::::*
	cpe:2.3:h:mediatek:mt6769:-:::::::*
	cpe:2.3:h:mediatek:mt6771:-:::::::*
	cpe:2.3:h:mediatek:mt6779:-:::::::*
	cpe:2.3:h:mediatek:mt6785:-:::::::*
	cpe:2.3:h:mediatek:mt6789:-:::::::*
	cpe:2.3:h:mediatek:mt6853:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6873:-:::::::*
	cpe:2.3:h:mediatek:mt6879:-:::::::*
	cpe:2.3:h:mediatek:mt6880:-:::::::*
	cpe:2.3:h:mediatek:mt6885:-:::::::*
	cpe:2.3:h:mediatek:mt6890:-:::::::*
	cpe:2.3:h:mediatek:mt6895:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt8167:-:::::::*
	cpe:2.3:h:mediatek:mt8175:-:::::::*
	cpe:2.3:h:mediatek:mt8185:-:::::::*
	cpe:2.3:h:mediatek:mt8195:-:::::::*
	cpe:2.3:h:mediatek:mt8321:-:::::::*
	cpe:2.3:h:mediatek:mt8365:-:::::::*
	cpe:2.3:h:mediatek:mt8385:-:::::::*
	cpe:2.3:h:mediatek:mt8395:-:::::::*
	cpe:2.3:h:mediatek:mt8666:-:::::::*
	cpe:2.3:h:mediatek:mt8667:-:::::::*
	cpe:2.3:h:mediatek:mt8673:-:::::::*
	cpe:2.3:h:mediatek:mt8675:-:::::::*
	cpe:2.3:h:mediatek:mt8765:-:::::::*
	cpe:2.3:h:mediatek:mt8766:-:::::::*
	cpe:2.3:h:mediatek:mt8768:-:::::::*
	cpe:2.3:h:mediatek:mt8781:-:::::::*
	cpe:2.3:h:mediatek:mt8786:-:::::::*
	cpe:2.3:h:mediatek:mt8788:-:::::::*
	cpe:2.3:h:mediatek:mt8789:-:::::::*
	cpe:2.3:h:mediatek:mt8791:-:::::::*
	cpe:2.3:h:mediatek:mt8791t:-:::::::*
	cpe:2.3:h:mediatek:mt8797:-:::::::*

History

24 May 2023, 15:10

Type	Values Removed	Values Added
First Time		Mediatek mt8791t Mediatek mt6761 Mediatek mt6769 Mediatek mt6879 Mediatek mt6765 Mediatek mt8766 Mediatek mt6785 Mediatek mt6855 Mediatek mt8786 Mediatek mt8788 Mediatek mt8666 Google android Mediatek mt6885 Mediatek mt8667 Mediatek mt8791 Mediatek mt8765 Mediatek Mediatek mt6739 Mediatek mt6768 Mediatek mt8167 Mediatek mt6873 Mediatek mt8385 Mediatek mt8781 Mediatek mt8768 Mediatek mt6771 Mediatek mt8195 Mediatek mt8797 Mediatek mt6789 Mediatek mt6983 Mediatek mt6779 Mediatek mt8175 Mediatek mt6580 Mediatek mt8789 Mediatek mt8321 Mediatek mt6880 Mediatek mt8673 Mediatek mt8365 Mediatek mt8185 Mediatek mt6853 Mediatek mt8675 Openwrt openwrt Mediatek mt6895 Mediatek mt8395 Google Mediatek mt6890 Openwrt
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.7
CPE		cpe:2.3:h:mediatek:mt6890:-:::::::* cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:h:mediatek:mt8395:-:::::::* cpe:2.3:h:mediatek:mt8666:-:::::::* cpe:2.3:h:mediatek:mt6580:-:::::::* cpe:2.3:h:mediatek:mt6873:-:::::::* cpe:2.3:h:mediatek:mt8185:-:::::::* cpe:2.3:h:mediatek:mt6761:-:::::::* cpe:2.3:h:mediatek:mt6765:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt6739:-:::::::* cpe:2.3:h:mediatek:mt8321:-:::::::* cpe:2.3:h:mediatek:mt8788:-:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt6771:-:::::::* cpe:2.3:h:mediatek:mt8675:-:::::::* cpe:2.3:h:mediatek:mt8673:-:::::::* cpe:2.3:h:mediatek:mt8791:-:::::::* cpe:2.3:h:mediatek:mt6768:-:::::::* cpe:2.3:h:mediatek:mt8365:-:::::::* cpe:2.3:h:mediatek:mt6880:-:::::::* cpe:2.3:h:mediatek:mt8765:-:::::::* cpe:2.3:h:mediatek:mt6785:-:::::::* cpe:2.3:h:mediatek:mt8789:-:::::::* cpe:2.3:o:openwrt:openwrt:19.07.0:-:::::: cpe:2.3:h:mediatek:mt8385:-:::::::* cpe:2.3:h:mediatek:mt8786:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:o:openwrt:openwrt:21.02.0:-:::::: cpe:2.3:h:mediatek:mt6779:-:::::::* cpe:2.3:h:mediatek:mt6885:-:::::::* cpe:2.3:h:mediatek:mt8667:-:::::::* cpe:2.3:h:mediatek:mt8791t:-:::::::* cpe:2.3:h:mediatek:mt6769:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt8175:-:::::::* cpe:2.3:h:mediatek:mt8781:-:::::::* cpe:2.3:h:mediatek:mt8768:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:h:mediatek:mt8766:-:::::::* cpe:2.3:h:mediatek:mt8195:-:::::::* cpe:2.3:h:mediatek:mt6853:-:::::::* cpe:2.3:h:mediatek:mt8167:-:::::::* cpe:2.3:h:mediatek:mt8797:-:::::::*
CWE		CWE-787
References	~~(MISC) https://corp.mediatek.com/product-security-bulletin/May-2023 -~~	(MISC) https://corp.mediatek.com/product-security-bulletin/May-2023 - Vendor Advisory

15 May 2023, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-05-15 22:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-20694

Mitre link : CVE-2023-20694

CVE.ORG link : CVE-2023-20694

JSON object : View

Products Affected

mediatek

mt6769
mt6789
mt8789
mt8791
mt8765
mt6761
mt8385
mt8797
mt8786
mt8666
mt8791t
mt6768
mt6890
mt8673
mt8768
mt8321
mt6855
mt8395
mt8167
mt6983
mt6885
mt8667
mt6771
mt6895
mt8788
mt6785
mt8365
mt8675
mt6873
mt6765
mt6580
mt8766
mt6880
mt6853
mt6779
mt6879
mt8185
mt8195
mt8781
mt8175
mt6739

google

android

openwrt

openwrt

CWE

CWE-787

Out-of-bounds Write

6.7 /10