Skip to content
OpenAdvisories
Medium · 6.4 CVE-2023-20835 EUVD-2023-25014GHSA-h64c-gqh4-8rr8

In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executi…

Published Sep 4, 2023 · Updated Oct 21, 2024 · Assigned by MediaTek

Description

In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.

Affected products

VendorProductAffectedFixed
MediaTek MT6895, MT6983, MT8188, MT8195, MT8395, MT8781 Android 12.0, 13.0 / IOT-v23.0 (Yocto 4.0) —

References