Out of Bounds Read Vulnerability in WLAN by MediaTek
CVE-2023-20731

4.4MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt6761, Mt6762, Mt6765, Mt6768, Mt6769, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6835, Mt6853, Mt6855, Mt6873, Mt6875, Mt6877, Mt6879, Mt6883, Mt6885, Mt6886, Mt6889, Mt6891, Mt6893, Mt6895, Mt6983, Mt6985, Mt7663, Mt7668, Mt7902, Mt7921, Mt8167, Mt8167s, Mt8173, Mt8175, Mt8195, Mt8362a, Mt8365, Mt8385, Mt8518, Mt8532, Mt8666, Mt8695, Mt8781, Mt8788
Vendor
CVE Published:
6 June 2023

What is CVE-2023-20731?

A vulnerability exists within WLAN due to a missing bounds check, allowing for a potential out of bounds read. This security flaw could facilitate local information disclosure, necessitating system execution privileges for exploitation. Notably, user interaction is not required, making it easier for attackers to exploit. Affected users are encouraged to apply available patches to mitigate this risk.

Affected Version(s)

MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT7663, MT7668, MT7902, MT7921, MT8167, MT8167S, MT8173, MT8175, MT8195, MT8362A, MT8365, MT8385, MT8518, MT8532, MT8666, MT8695, MT8781, MT8788 Android 12.0, 13.0 / Yocto 3.1,3.3,4.0

References

https://corp.mediatek.com/product-security-bulletin/June-...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-20731 : Out of Bounds Read Vulnerability in WLAN by MediaTek