CVE-2023-20835 : In camsys, there is a possible use after free due to a race condition. This coul

In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.

Published 2023-09-04 03:15:10

Updated 2024-10-21 17:35:16

Source MediaTek, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-20835

Google » Android » Version: 12.0
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8188 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8395 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
Google » Android » Version: 13.0
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8188 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8395 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
Linuxfoundation » Yocto » Version: 4.0
cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8188 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8395 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A
Mediatek » Iot Yocto » Version: 23.0
cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6895 » Version: N/A
When used together with: Mediatek » Mt6983 » Version: N/A
When used together with: Mediatek » Mt8188 » Version: N/A
When used together with: Mediatek » Mt8195 » Version: N/A
When used together with: Mediatek » Mt8395 » Version: N/A
When used together with: Mediatek » Mt8781 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20835

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20835

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H	0.5	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2024-10-21
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H	0.5	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-20835

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2023-20835

https://corp.mediatek.com/product-security-bulletin/September-2023

September 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-20835

Products affected by CVE-2023-20835

Exploit prediction scoring system (EPSS) score for CVE-2023-20835

CVSS scores for CVE-2023-20835

CWE ids for CVE-2023-20835

References for CVE-2023-20835