CVE-2023-20819: Critical severity MediaTek Lr11 vulnerability
In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-10-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01068234
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20819?
CVE-2023-20819 is a critical vulnerability that could lead to remote escalation of privilege.
How do I fix CVE-2023-20819?
To fix CVE-2023-20819, apply the available patches identified by Patch ID MOLY01068234.
Which software is affected by CVE-2023-20819?
CVE-2023-20819 affects several versions of Google Android and multiple MediaTek chipsets.
Is user interaction required for exploiting CVE-2023-20819?
No, user interaction is not needed for the exploitation of CVE-2023-20819.
What is the potential impact of CVE-2023-20819?
The potential impact of CVE-2023-20819 includes unauthorized access to system resources due to privilege escalation.