Out of Bounds Read Vulnerability in MediaTek WLAN Software

CVE-2023-20730

What is CVE-2023-20730?

A vulnerability exists in MediaTek's WLAN software where a missing bounds check can result in an out of bounds read. This flaw could potentially allow local information disclosure, requiring system execution privileges for successful exploitation. Notably, user interaction is not needed to exploit this vulnerability, which increases the risk of unauthorized access to sensitive information. A fix is available under Patch ID ALPS07573552, addressing this critical gap in security.

References