CVE-2023-20847
First published: Mon Sep 04 2023(Updated: )
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354025; Issue ID: ALPS07340108.
Credit: security@mediatek.com security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linuxfoundation Yocto | =4.0 | |
| Mediatek Iot Yocto | =23.0 | |
| Google Android | =11.0 | |
| Google Android | =12.0 | |
| Linux Linux kernel | =6.1 | |
| Mediatek Mt6895 | ||
| Mediatek Mt6897 | ||
| Mediatek Mt6983 | ||
| Mediatek Mt8188 | ||
| Mediatek Mt8195 | ||
| Mediatek Mt8395 | ||
| Mediatek Mt8781 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-20847.
What is the severity of CVE-2023-20847?
The severity of CVE-2023-20847 is medium with a CVSS score of 4.2.
Which software products are affected by CVE-2023-20847?
The affected software products are Linuxfoundation Yocto 4.0, Mediatek Iot Yocto 23.0, Google Android 11.0 and 12.0, and Linux Linux Kernel 6.1.
How can CVE-2023-20847 be exploited?
CVE-2023-20847 can be exploited with user interaction, which could lead to local denial of service with system execution privileges needed.
Is there a patch available for CVE-2023-20847?
Yes, a patch with Patch ID ALPS07354025 is available for CVE-2023-20847. Please refer to the reference link for more information.
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/linuxfoundation
- canonical/linuxfoundation yocto
- version/linuxfoundation yocto/4.0
- vendor/mediatek
- canonical/mediatek iot yocto
- version/mediatek iot yocto/23.0
- vendor/google
- canonical/google android
- version/google android/11.0
- version/google android/12.0
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/6.1
- canonical/mediatek mt6895
- canonical/mediatek mt6897
- canonical/mediatek mt6983
- canonical/mediatek mt8188
- canonical/mediatek mt8195
- canonical/mediatek mt8395
- canonical/mediatek mt8781