In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664735; Issue ID: ALPS07664735.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/July-2023 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Jul 2023, 23:57
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-190 | |
| CPE | cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://corp.mediatek.com/product-security-bulletin/July-2023 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
04 Jul 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-04 02:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-20690
Mitre link : CVE-2023-20690
CVE.ORG link : CVE-2023-20690
JSON object : View
Products Affected
mediatek
- mt6739
- mt8167
- mt8168
- mt8321
- mt8788
- mt8765
- mt8666
- mt8385
- mt8365
linuxfoundation
- yocto
- android
CWE
CWE-190
Integer Overflow or Wraparound