Out of Bounds Read Vulnerability in Mediatek Imaging System
CVE-2023-20845

4.2MEDIUM

Key Information:

Vendor
MediaTek
Status
Mt6895, Mt6897, Mt6983, Mt8188, Mt8195, Mt8395
Vendor
CVE Published:
4 September 2023

Summary

A vulnerability in the Mediatek imaging system (imgsys) arises from insufficient range checking, allowing for potential out of bounds read attacks. Successful exploitation can lead to unauthorized local information disclosure, requiring user interaction and system execution privileges. Users are advised to apply the latest security patches to mitigate this risk.

Affected Version(s)

MT6895, MT6897, MT6983, MT8188, MT8195, MT8395 Android 11.0, 12.0 / Linux 6.1 / IOT-v23.0 / Yocto 4.0

References

https://corp.mediatek.com/product-security-bulletin/Septe...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.