CVE-2023-20722: Input Validation
First published: Mon May 15 2023(Updated: )
In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =12.0 | |
| Google Android | =13.0 | |
| Mediatek Mt6765 | ||
| Mediatek Mt6768 | ||
| Mediatek Mt8768 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-20722.
What is the severity of CVE-2023-20722?
The severity of CVE-2023-20722 is medium with a CVSS score of 6.7.
How does CVE-2023-20722 affect Google Android?
CVE-2023-20722 affects Google Android versions 12.0 and 13.0.
How does CVE-2023-20722 affect Mediatek Mt6765, Mt6768, and Mt8768?
CVE-2023-20722 does not affect Mediatek Mt6765, Mt6768, and Mt8768.
Is user interaction required to exploit CVE-2023-20722?
No, user interaction is not needed for exploitation of CVE-2023-20722.
How can I patch CVE-2023-20722?
You can patch CVE-2023-20722 by installing the patch identified as ALPS07771518.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google android
- version/google android/12.0
- version/google android/13.0
- vendor/mediatek
- canonical/mediatek mt6765
- canonical/mediatek mt6768
- canonical/mediatek mt8768