Integer Overflow Vulnerability in MediaTek WLAN Firmware
CVE-2023-20691

7.5HIGH

Key Information:

Vendor

MediaTek
Status
Mt6739, Mt8167, Mt8321, Mt8365, Mt8385, Mt8666, Mt8765, Mt8788
Vendor
CVE Published:
4 July 2023

What is CVE-2023-20691?

An integer overflow vulnerability exists in MediaTek WLAN firmware, which may result in a system crash. This vulnerability allows for a remote denial of service, requiring no special execution privileges or user interaction, making it particularly concerning for users relying on efficient and stable wireless communication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT8765, MT8788 Android 11.0, 12.0 / IOT-v23.0 (Yocto 4.0)

References

https://corp.mediatek.com/product-security-bulletin/July-...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.