← Database

CVE-2023-20655

HIGH CVSS: 7.8 Published: 2023-04-06 Modified: 2026-06-17

Description

In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022.

Affected Platforms

Mediatek Mt8365Mediatek Mt6855Mediatek Mt8167SMediatek Mt8185Mediatek Mt6779Mediatek Mt8362AMediatek Mt8771Mediatek Mt8192Mediatek Mt6753Mediatek Mt8768

Weakness Type

CWE-269, CWE-269

References