CVE-2023-20682

EPSS 0.1%
Veröffentlicht 06.04.2023 18:15:09
Zuletzt bearbeitet 12.02.2025 16:15:35
Erkennungen
Login

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441605; Issue ID: ALPS07441605.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 11.0

   Mediatek ≫ Mt6580 Version -
   Mediatek ≫ Mt6735 Version -
   Mediatek ≫ Mt6765 Version -
   Mediatek ≫ Mt6768 Version -
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt6785 Version -
   Mediatek ≫ Mt6833 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6983 Version -
   Mediatek ≫ Mt7933 Version -
   Mediatek ≫ Mt8167s Version -
   Mediatek ≫ Mt8168 Version -
   Mediatek ≫ Mt8169 Version -
   Mediatek ≫ Mt8175 Version -
   Mediatek ≫ Mt8185 Version -
   Mediatek ≫ Mt8362a Version -
   Mediatek ≫ Mt8365 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8518 Version -
   Mediatek ≫ Mt8532 Version -
   Mediatek ≫ Mt8675 Version -
   Mediatek ≫ Mt8695 Version -
   Mediatek ≫ Mt8766 Version -
   Mediatek ≫ Mt8768 Version -
   Mediatek ≫ Mt8771 Version -
   Mediatek ≫ Mt8781 Version -
   Mediatek ≫ Mt8786 Version -
   Mediatek ≫ Mt8788 Version -
   Mediatek ≫ Mt8789 Version -
   Mediatek ≫ Mt8791t Version -
   Mediatek ≫ Mt8797 Version -
   Mediatek ≫ Mt8798 Version -

Google ≫ Android Version 12.0

Google ≫ Android Version 13.0

Yoctoproject ≫ Yocto Version 3.1

Yoctoproject ≫ Yocto Version 3.3

Yoctoproject ≫ Yocto Version 4.0

Linux ≫ Linux Kernel Version 4.19

   Mediatek ≫ Mt5221 Version -
   Mediatek ≫ Mt7663 Version -
   Mediatek ≫ Mt7668 Version -
   Mediatek ≫ Mt7902 Version -
   Mediatek ≫ Mt7921 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.008

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://corp.mediatek.com/product-security-bulletin/April-2023

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-20682

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-20682

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-20682

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-20682