Integer Overflow Vulnerability in MediaTek WLAN Firmware
CVE-2023-20690

7.5HIGH

Key Information:

Vendor

MediaTek
Status
Mt6739, Mt8167, Mt8168, Mt8321, Mt8365, Mt8385, Mt8666, Mt8765, Mt8788
Vendor
CVE Published:
4 July 2023

What is CVE-2023-20690?

A vulnerability has been identified in the WLAN firmware provided by MediaTek, which occurs due to an integer overflow. This flaw may allow an attacker to exploit the system remotely, resulting in a denial of service without requiring any user interaction or special execution privileges. Affected users should update to the patched version identified by Patch ID ALPS07664735 to mitigate the risk.

Affected Version(s)

MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT8666, MT8765, MT8788 Android 11.0, 12.0 / IOT-v23.0 (Yocto 4.0)

References

https://corp.mediatek.com/product-security-bulletin/July-...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.