Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20645


In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609.


Published

2023-03-07T21:15:11.627

Last Modified

2025-03-05T20:15:42.957

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-20
  • Type: Secondary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System google android 12.0 Yes
Operating System google android 13.0 Yes
Hardware mediatek mt6739 - No
Hardware mediatek mt6761 - No
Hardware mediatek mt6762 - No
Hardware mediatek mt6763 - No
Hardware mediatek mt6765 - No
Hardware mediatek mt6769 - No
Hardware mediatek mt6771 - No
Hardware mediatek mt6779 - No
Hardware mediatek mt6785 - No
Hardware mediatek mt6789 - No
Hardware mediatek mt6873 - No
Hardware mediatek mt6875 - No
Hardware mediatek mt6877 - No
Hardware mediatek mt6879 - No
Hardware mediatek mt6895 - No
Hardware mediatek mt6983 - No
Hardware mediatek mt8791 - No
Hardware mediatek mt8791t - No
Hardware mediatek mt8797 - No

References