Skip to content
OpenAdvisories
Unscored CVE-2023-20801 EUVD-2023-24980GHSA-3fxj-v6q3-j2xg

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executi…

Published Aug 7, 2023 · Updated Nov 7, 2024 · Assigned by MediaTek

Description

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420968.

Affected products

VendorProductAffectedFixed
MediaTek MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8781 Android 12.0, 13.0 / IOT-v23.0 (Yocto 4.0) —

References