IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.7Media

CVE-2023-20830

MediaTek, Inc. MT2713, MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880,… Publicada: (hace 3 años)

Descripción

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.

Debilidad (CWE): CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
google android 12.0, 13.0
mediatek mt2713 0
MediaTek, Inc. MT2713, MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, Android 12.0, 13.0 / OpenWrt 1907, 2102 / Yocto 2.6 / RDK-B 22Q3
mediatek mt2735 0
mediatek mt6761 0
mediatek mt6762 0
mediatek mt6765 0
mediatek mt6768 0
mediatek mt6769 0
mediatek mt6779 0
mediatek mt6833 0
mediatek mt6835 0
mediatek mt6853 0
mediatek mt6853t 0
mediatek mt6855 0
mediatek mt6873 0
mediatek mt6875 0
mediatek mt6877 0
mediatek mt6879 0
mediatek mt6880 0
mediatek mt6883 0
mediatek mt6885 0
mediatek mt6886 0
mediatek mt6889 0
mediatek mt6890 0
mediatek mt6891 0
mediatek mt6893 0
mediatek mt6895 0
mediatek mt6980 0
mediatek mt6983 0
mediatek mt6985 0
mediatek mt6990 0
mediatek mt8167 0
mediatek mt8167s 0
mediatek mt8168 0
mediatek mt8173 0
mediatek mt8195 0
mediatek mt8362a 0
mediatek mt8365 0
mediatek mt8781 0

Referencias y parches

CVE recientes del mismo producto — Android

Sin puntuación
CVE-2026-59599
Google Android

Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in the kernel, aka A-519434175.

6.7Media
CVE-2026-58977
Google Android

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

7.8Alta
CVE-2026-58930
Google Android

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, injec…

6.7Media
CVE-2026-58927
Google Android

The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a …

2.5Baja
CVE-2026-58926
Google Android

A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using it. This race condition, triggered via `doneWithFrame` and `setMaxFramesInFlight`, enables an attacke…

7.8Alta
CVE-2026-58925
Google Android

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigg…