← Database

CVE-2023-20634

MEDIUM CVSS: 6.7 Published: 2023-03-07 Modified: 2026-06-17

Description

In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07635697; Issue ID: ALPS07635697.

Affected Platforms

Mediatek Mt6855Mediatek Mt6779Mediatek Mt8768Mediatek Mt8786Mediatek Mt6893Mediatek Mt6873Mediatek Mt8797Mediatek Mt6789Google AndroidMediatek Mt6889

Weakness Type

CWE-20, CWE-20

References