CVE-2023-20696
First published: Mon May 01 2023(Updated: )
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).
Credit: security@mediatek.com security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| All of | ||
| Any of | ||
| Google Android | =13.0 | |
| OpenWrt OpenWrt | =19.07.0 | |
| OpenWrt OpenWrt | =21.02.0 | |
| Any of | ||
| MediaTek MT6880 | ||
| MediaTek MT6890 | ||
| Mediatek MT8167 | ||
| MediaTek MT8175 Firmware | ||
| MediaTek MT8185 | ||
| MediaTek MT8195Z | ||
| MediaTek MT8321 | ||
| MediaTek MT8365 Firmware | ||
| MediaTek MT8385 Firmware | ||
| MediaTek MT8395 | ||
| MediaTek MT8666 | ||
| MediaTek MT8667 | ||
| MediaTek MT8673 | ||
| MediaTek MT8675 | ||
| MediaTek MT8765 | ||
| MediaTek MT8766Z | ||
| MediaTek MT8768 | ||
| MediaTek MT8781 WiFi | ||
| mediatek mt8786 | ||
| MediaTek MT8788 Firmware | ||
| MediaTek MT8789 | ||
| MediaTek MT8791 WiFi | ||
| MediaTek MT8791T | ||
| MediaTek MT8797 | ||
| Google Android | =13.0 | |
| OpenWrt OpenWrt | =19.07.0 | |
| OpenWrt OpenWrt | =21.02.0 | |
| MediaTek MT6880 | ||
| MediaTek MT6890 | ||
| Mediatek MT8167 | ||
| MediaTek MT8175 Firmware | ||
| MediaTek MT8185 | ||
| MediaTek MT8195Z | ||
| MediaTek MT8321 | ||
| MediaTek MT8365 Firmware | ||
| MediaTek MT8385 Firmware | ||
| MediaTek MT8395 | ||
| MediaTek MT8666 | ||
| MediaTek MT8667 | ||
| MediaTek MT8673 | ||
| MediaTek MT8675 | ||
| MediaTek MT8765 | ||
| MediaTek MT8766Z | ||
| MediaTek MT8768 | ||
| MediaTek MT8781 WiFi | ||
| mediatek mt8786 | ||
| MediaTek MT8788 Firmware | ||
| MediaTek MT8789 | ||
| MediaTek MT8791 WiFi | ||
| MediaTek MT8791T | ||
| MediaTek MT8797 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-20696.
What is the severity of CVE-2023-20696?
The severity of CVE-2023-20696 is high.
Is user interaction required for exploitation?
No, user interaction is not needed for exploitation of CVE-2023-20696.
Which software versions are affected by CVE-2023-20696?
Google Android 13.0, Openwrt 19.07.0, and Openwrt 21.02.0 are affected by CVE-2023-20696.
How can I fix CVE-2023-20696?
To fix CVE-2023-20696, apply the patch provided by the vendor.
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/event
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/google android
- version/google android/13.0
- vendor/openwrt
- canonical/openwrt openwrt
- version/openwrt openwrt/19.07.0
- version/openwrt openwrt/21.02.0
- vendor/mediatek
- canonical/mediatek mt6880
- canonical/mediatek mt6890
- canonical/mediatek mt8167
- canonical/mediatek mt8175 firmware
- canonical/mediatek mt8185
- canonical/mediatek mt8195z
- canonical/mediatek mt8321
- canonical/mediatek mt8365 firmware
- canonical/mediatek mt8385 firmware
- canonical/mediatek mt8395
- canonical/mediatek mt8666
- canonical/mediatek mt8667
- canonical/mediatek mt8673
- canonical/mediatek mt8675
- canonical/mediatek mt8765
- canonical/mediatek mt8766z
- canonical/mediatek mt8768
- canonical/mediatek mt8781 wifi
- canonical/mediatek mt8786
- canonical/mediatek mt8788 firmware
- canonical/mediatek mt8789
- canonical/mediatek mt8791 wifi
- canonical/mediatek mt8791t
- canonical/mediatek mt8797