Potential Out of Bounds Read in Mediatek img_sys Command Queue

CVE-2023-20846

What is CVE-2023-20846?

The img_sys command queue in Mediatek devices has a vulnerability where there is a possibility of an out-of-bounds read due to missing valid range checks. This flaw may lead to local information disclosure, requiring system execution privileges to exploit. Successful exploitation of this vulnerability necessitates user interaction, emphasizing the importance of maintaining updated systems to prevent potential security risks. For further details, refer to the Mediatek product security bulletin.

References