CVE-2023-20841: Medium severity yocto project vulnerability
In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326441.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-20841?
CVE-2023-20841 is a vulnerability in imgsys that could lead to local escalation of privilege with System execution privileges needed.
What is the severity of CVE-2023-20841?
The severity of CVE-2023-20841 is medium, with a severity value of 6.5.
Which software versions are affected by CVE-2023-20841?
CVE-2023-20841 affects Linuxfoundation Yocto version 4.0, Mediatek Iot Yocto version 23.0, Google Android versions 11.0 and 12.0, and Linux Linux Kernel version 6.1.
What is the patch ID for CVE-2023-20841?
The patch ID for CVE-2023-20841 is ALPS07326455.
Is user interaction needed for the exploitation of CVE-2023-20841?
Yes, user interaction is needed for the exploitation of CVE-2023-20841.