Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-20719 EUVD-2023-24898GHSA-p3p9-g3mr-hhrx

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with …

Published May 15, 2023 · Updated Jan 24, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8385, MT866

Description

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583.

Affected products

VendorProductAffectedFixed
MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT6985, MT8167, MT816 Android 12.0, 13.0 —

References