Skip to content
OpenAdvisories
Medium · 4.1 CVE-2023-20717 EUVD-2023-24896GHSA-w8f5-3gp4-chp4

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System executi…

Published May 15, 2023 · Updated Jan 24, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8175, MT8195, MT8365, MT8395, MT867

Description

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185.

Affected products

VendorProductAffectedFixed
MediaTek MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8175, MT8365, MT8786, MT8789, MT879 Android 11.0, 12.0, 13.0 —

References