1. CVE-Search
  2. CVE-2023-20849
ID CVE-2023-20849
Summary In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350.
References
Vulnerable Configurations
  • cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*
    cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
    cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
    cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
    cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-416
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 01-10-2024 - 19:35
Published 04-09-2023 - 03:15
Last modified 01-10-2024 - 19:35
Back to Top