Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-20819 EUVD-2023-24998GHSA-j4jq-q994-j2wv

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privil…

Published Oct 2, 2023 · Updated Sep 21, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737, MT6737M, MT6738, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6757, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT

Description

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003.

Affected products

VendorProductAffectedFixed
MediaTek MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737, MT6737M, MT6738, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6757, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT Modem LR11, LR12A, LR13, NR15, NR16, NR17 —

Advisories 2

References