Skip to content
OpenAdvisories
Unscored CVE-2023-20824 EUVD-2023-25003GHSA-h968-vw4p-8grj

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure…

Published Sep 4, 2023 · Updated Oct 10, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT688

Description

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951402.

Affected products

VendorProductAffectedFixed
MediaTek MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT688 Android 12.0, 13.0 —

References