CVE-2023-20803: Input Validation
First published: Mon Aug 07 2023(Updated: )
In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Yocto Project | =4.0 | |
| Android | =12.0 | |
| Android | =13.0 | |
| Any of | ||
| MediaTek MT2713 | ||
| MediaTek MT6879 | ||
| MediaTek MT6895 | ||
| MediaTek MT6983 | ||
| MediaTek MT8188 | ||
| MediaTek MT8195Z | ||
| MediaTek MT8395 | ||
| MediaTek MT8673 | ||
| Yocto Project | =4.0 | |
| Android | =12.0 | |
| Android | =13.0 | |
| MediaTek MT2713 | ||
| MediaTek MT6879 | ||
| MediaTek MT6895 | ||
| MediaTek MT6983 | ||
| MediaTek MT8188 | ||
| MediaTek MT8195Z | ||
| MediaTek MT8395 | ||
| MediaTek MT8673 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-20803?
CVE-2023-20803 is a vulnerability in imgsys where there is a possible memory corruption due to improper input validation.
What are the affected software versions?
The affected software versions include Linuxfoundation Yocto 4.0, Google Android 12.0, and Google Android 13.0.
What is the severity of CVE-2023-20803?
CVE-2023-20803 has a severity rating of medium, with a CVSS score of 6.5.
What is the patch for CVE-2023-20803?
The patch for CVE-2023-20803 is ALPS07326455.
Is user interaction needed for exploitation?
Yes, user interaction is needed for exploitation of CVE-2023-20803.
- agent/type
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/linuxfoundation
- canonical/yocto project
- version/yocto project/4.0
- vendor/google
- canonical/android
- version/android/12.0
- version/android/13.0
- vendor/mediatek
- canonical/mediatek mt2713
- canonical/mediatek mt6879
- canonical/mediatek mt6895
- canonical/mediatek mt6983
- canonical/mediatek mt8188
- canonical/mediatek mt8195z
- canonical/mediatek mt8395
- canonical/mediatek mt8673