Skip to content
OpenAdvisories
Medium · 6.4 CVE-2023-20608 EUVD-2023-24787GHSA-3865-xcmr-qxp5

In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System ex…

Published Feb 6, 2023 · Updated Mar 26, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8675, MT8766, MT8781, MT8791

Description

In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599.

Affected products

VendorProductAffectedFixed
MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8675 Android 11.0, 12.0, 13.0 —

References