← Database

CVE-2023-20685

MEDIUM CVSS: 6.4 Published: 2023-04-06 Modified: 2026-06-17

Description

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575.

Affected Platforms

Mediatek Mt8795TMediatek Mt6855Google AndroidMediatek Mt6879Mediatek Mt8673Mediatek Mt8781Mediatek Mt8798Mediatek Mt6895Mediatek Mt8891Mediatek Mt6983

Weakness Type

CWE-362, CWE-362

References