Skip to content
OpenAdvisories
High · 8.4 CVE-2023-20721 EUVD-2023-24900GHSA-w9pq-cx97-h8gm

In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Sys…

Published May 15, 2023 · Updated Jan 24, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6879, MT6895, MT6983, MT8195, MT8395, MT8673

Description

In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07162155; Issue ID: ALPS07162155.

Affected products

VendorProductAffectedFixed
MediaTek MT6879, MT6895, MT6983, MT8195, MT8395, MT8673 Android 12.0, 13.0 / Iot-Yocto 22.2 (Yocto 4.0) —

References