CVE-2023-20832 : In gps, there is a possible out of bounds write due to a missing bounds check. T

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.

Published 2023-09-04 03:15:10

Updated 2024-10-04 15:35:03

Source MediaTek, Inc.

View at NVD, CVE.org

Products affected by CVE-2023-20832

Google » Android » Version: 12.0
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A
Google » Android » Version: 13.0
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A
Linuxfoundation » Yocto » Version: 2.6
cpe:2.3:a:linuxfoundation:yocto:2.6:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A
Openwrt » Openwrt » Version: 19.07.0
cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A
Openwrt » Openwrt » Version: 21.02.0
cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A
Rdkcentral » Rdk-b » Version: 2022q3
cpe:2.3:a:rdkcentral:rdk-b:2022q3:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt2735 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6835 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6855 » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6879 » Version: N/A
When used together with: Mediatek » Mt6880 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6886 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6890 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6980 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt6985 » Version: N/A
When used together with: Mediatek » Mt6990 » Version: N/A
When used together with: Mediatek » Mt8167 » Version: N/A
When used together with: Mediatek » Mt8167s » Version: N/A
When used together with: Mediatek » Mt8168 » Version: N/A
When used together with: Mediatek » Mt8175 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8362a » Version: N/A
When used together with: Mediatek » Mt8365 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20832

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20832

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2024-10-04
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-20832

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2023-20832

https://corp.mediatek.com/product-security-bulletin/September-2023

September 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-20832

Products affected by CVE-2023-20832

Exploit prediction scoring system (EPSS) score for CVE-2023-20832

CVSS scores for CVE-2023-20832

CWE ids for CVE-2023-20832

References for CVE-2023-20832