CVE-2023-20803: Input Validation
First published: Mon Aug 07 2023(Updated: )
In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.
Credit: security@mediatek.com security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linuxfoundation Yocto | =4.0 | |
| Google Android | =12.0 | |
| Google Android | =13.0 | |
| Mediatek Mt2713 | ||
| Mediatek Mt6879 | ||
| Mediatek Mt6895 | ||
| Mediatek Mt6983 | ||
| Mediatek Mt8188 | ||
| Mediatek Mt8195 | ||
| Mediatek Mt8395 | ||
| Mediatek Mt8673 | ||
| All of | ||
| Any of | ||
| Linuxfoundation Yocto | =4.0 | |
| Google Android | =12.0 | |
| Google Android | =13.0 | |
| Any of | ||
| Mediatek Mt2713 | ||
| Mediatek Mt6879 | ||
| Mediatek Mt6895 | ||
| Mediatek Mt6983 | ||
| Mediatek Mt8188 | ||
| Mediatek Mt8195 | ||
| Mediatek Mt8395 | ||
| Mediatek Mt8673 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-20803?
CVE-2023-20803 is a vulnerability in imgsys where there is a possible memory corruption due to improper input validation.
What are the affected software versions?
The affected software versions include Linuxfoundation Yocto 4.0, Google Android 12.0, and Google Android 13.0.
What is the severity of CVE-2023-20803?
CVE-2023-20803 has a severity rating of medium, with a CVSS score of 6.5.
What is the patch for CVE-2023-20803?
The patch for CVE-2023-20803 is ALPS07326455.
Is user interaction needed for exploitation?
Yes, user interaction is needed for exploitation of CVE-2023-20803.
- agent/author
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/linuxfoundation
- canonical/linuxfoundation yocto
- version/linuxfoundation yocto/4.0
- vendor/google
- canonical/google android
- version/google android/12.0
- version/google android/13.0
- vendor/mediatek
- canonical/mediatek mt2713
- canonical/mediatek mt6879
- canonical/mediatek mt6895
- canonical/mediatek mt6983
- canonical/mediatek mt8188
- canonical/mediatek mt8195
- canonical/mediatek mt8395
- canonical/mediatek mt8673