Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-20812 EUVD-2023-24991GHSA-w8mw-25qv-x5vf

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure w…

Published Aug 7, 2023 · Updated Oct 28, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT6783, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6896, MT6983

Description

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.

Affected products

VendorProductAffectedFixed
MediaTek MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT6783, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6896, MT6983 Android 13.0 / IOT-v23.0 (Yocto 4.0) —

References