Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-20642 EUVD-2023-24821GHSA-72mj-647x-f2hj

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…

Published Mar 7, 2023 · Updated Mar 6, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797

Description

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628586; Issue ID: ALPS07628586.

Affected products

VendorProductAffectedFixed
MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797 Android 12.0, 13.0 —

References