Skip to content
OpenAdvisories
Medium · 6.4 CVE-2023-20685 EUVD-2023-24864GHSA-6pxh-m5x3-c752

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution…

Published Apr 6, 2023 · Updated Feb 12, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT8781, MT8795T, MT8798, MT8891

Description

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575.

Affected products

VendorProductAffectedFixed
MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT8781, MT8795T, MT8798, MT8891 Android 12.0, 13.0 —

References