CVE-2023-20827: Race Condition
Published Sep 4, 2023
·Updated
In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937105; Issue ID: ALPS07937105.
Affected Software
66 affected components
All of the following
Any of the following
Google Android=12.0
Google Android=13.0
Any of the following
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6763
MediaTek Mt6768
MediaTek Mt6769
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6781
MediaTek Mt6785
MediaTek Mt6789
MediaTek Mt6833
MediaTek Mt6835
MediaTek Mt6853
MediaTek Mt6853t
MediaTek Mt6855
MediaTek Mt6873
MediaTek Mt6875
MediaTek Mt6877
MediaTek Mt6879
MediaTek Mt6883
MediaTek Mt6885
MediaTek Mt6886
MediaTek Mt6889
MediaTek Mt6891
MediaTek Mt6893
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt6985
MediaTek Mt8673
MediaTek Mt8791t
MediaTek Mt8797
Google Android=12.0
Google Android=13.0
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6763
MediaTek Mt6768
MediaTek Mt6769
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6781
MediaTek Mt6785
MediaTek Mt6789
MediaTek Mt6833
MediaTek Mt6835
MediaTek Mt6853
MediaTek Mt6853t
MediaTek Mt6855
MediaTek Mt6873
MediaTek Mt6875
MediaTek Mt6877
MediaTek Mt6879
MediaTek Mt6883
MediaTek Mt6885
MediaTek Mt6886
MediaTek Mt6889
MediaTek Mt6891
MediaTek Mt6893
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt6985
MediaTek Mt8673
MediaTek Mt8791t
MediaTek Mt8797
Event History
Sep 4, 2023
CVE Published
via MITRE·02:27 AM
Data Sourced
via MITRE·02:27 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this memory corruption in ims service?
The vulnerability ID for this memory corruption in ims service is CVE-2023-20827.
2
What is the severity level of CVE-2023-20827?
The severity level of CVE-2023-20827 is medium.
3
What software is affected by CVE-2023-20827?
The affected software includes Google Android versions 12.0 and 13.0.
4
Is user interaction required for exploitation of CVE-2023-20827?
No, user interaction is not needed for exploitation of CVE-2023-20827.
5
How can I fix CVE-2023-20827?
To fix CVE-2023-20827, apply the patch ID ALPS07937105 available from the reference link provided by MediaTek.