← Database

CVE-2023-20725

MEDIUM CVSS: 6.7 Published: 2023-06-06 Modified: 2026-06-17

Description

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only); Issue ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only).

Affected Platforms

Mediatek Mt8365Mediatek Mt6855Mediatek Mt6779Mediatek Mt6739Mediatek Mt6893Mediatek Mt6873Mediatek Mt6983Mediatek Mt6789Google AndroidMediatek Mt6889

Weakness Type

CWE-787, CWE-787

References