Out of Bounds Read Vulnerability in Bluetooth by MediaTek

CVE-2023-20723

What is CVE-2023-20723?

A vulnerability in Bluetooth technology has been identified, where a missing bounds check can lead to an out of bounds read. This flaw allows for a potential local escalation of privileges, requiring system execution privileges for successful exploitation. Notably, user interaction is not necessary, making this a significant security concern for devices leveraging MediaTek's Bluetooth capabilities. Affected users should be aware of this issue and apply the necessary patches as indicated in Patch ID ALPS07843845.

References