In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441605; Issue ID: ALPS07441605.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/April-2023 | Vendor Advisory |
| https://corp.mediatek.com/product-security-bulletin/April-2023 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
12 Feb 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://corp.mediatek.com/product-security-bulletin/April-2023 - Vendor Advisory |
12 Apr 2023, 19:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://corp.mediatek.com/product-security-bulletin/April-2023 - Vendor Advisory | |
| CPE | cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:* cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:* cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:* |
|
| CWE | CWE-190 | |
| First Time |
Mediatek mt8798
Mediatek mt6779 Mediatek mt6877 Mediatek mt7933 Mediatek Mediatek mt8532 Mediatek mt8786 Mediatek mt6735 Mediatek mt8167s Mediatek mt7668 Mediatek mt8175 Mediatek mt8768 Mediatek mt8771 Mediatek mt8185 Mediatek mt6768 Mediatek mt6785 Mediatek mt8675 Mediatek mt7663 Mediatek mt6771 Mediatek mt8362a Mediatek mt8766 Mediatek mt8797 Mediatek mt6885 Linux Mediatek mt8695 Mediatek mt6983 Mediatek mt6765 Mediatek mt6873 Mediatek mt5221 Mediatek mt8365 Mediatek mt8781 Linux linux Kernel Yoctoproject Mediatek mt7902 Google android Mediatek mt6853 Mediatek mt8788 Mediatek mt8791t Mediatek mt6833 Mediatek mt8518 Mediatek mt8789 Yoctoproject yocto Mediatek mt8168 Mediatek mt7921 Mediatek mt8169 Mediatek mt8385 Mediatek mt6580 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
06 Apr 2023, 19:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-06 18:15
Updated : 2025-02-12 16:15
NVD link : CVE-2023-20682
Mitre link : CVE-2023-20682
JSON object : View
Products Affected
mediatek
- mt8789
- mt8768
- mt7933
- mt8695
- mt6833
- mt5221
- mt8786
- mt8169
- mt6983
- mt8766
- mt7902
- mt8791t
- mt8167s
- mt8675
- mt8175
- mt6873
- mt8797
- mt6580
- mt8518
- mt8365
- mt8771
- mt8168
- mt8781
- mt7921
- mt6785
- mt7668
- mt8362a
- mt6768
- mt8185
- mt8532
- mt8788
- mt6771
- mt6885
- mt8798
- mt6765
- mt8385
- mt6735
- mt6779
- mt7663
- mt6877
- mt6853
yoctoproject
- yocto
linux
- linux_kernel
- android
CWE
CWE-190
Integer Overflow or Wraparound