CVE-2023-20835: Use After Free
In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-20835?
CVE-2023-20835 is a vulnerability in camsys that allows for a possible use after free due to a race condition, leading to local escalation of privilege with System execution privileges needed.
What is the severity of CVE-2023-20835?
The severity of CVE-2023-20835 is medium with a CVSS score of 6.4.
Which software versions are affected by CVE-2023-20835?
Linux Foundation Yocto 4.0, Mediatek IoT Yocto 23.0, Google Android 12.0, Google Android 13.0
Is Mediatek Mt6895 affected by CVE-2023-20835?
No, Mediatek Mt6895 is not vulnerable to CVE-2023-20835.
How can I patch CVE-2023-20835?
Patch ID: ALPS07341261; Issue ID: ALPS07326570. Please refer to the vendor's product security bulletin for more information: https://corp.mediatek.com/product-security-bulletin/September-2023