Skip to content
OpenAdvisories
Unscored CVE-2023-20808 EUVD-2023-24987GHSA-3r42-gxp3-vpfc

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst…

Published Aug 7, 2023 · Updated Oct 15, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT9011, MT9022, MT9618, MT9649, MT9653

Description

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03645895; Issue ID: DTV03645895.

Affected products

VendorProductAffectedFixed
MediaTek MT9011, MT9022, MT9618, MT9649, MT9653 Android 11.0 —

References