CVE-2023-20844

CVE-2023-20844: vulnerability in MediaTek, Inc. MT6895, MT6897, MT6983, MT8188…

Published · Updated

Follow this CVE+ Monitor MT6983+ Monitor MT8188

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354058; Issue ID: ALPS07340121.
Affected products
MediaTek, Inc. · MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Related CVEs — MediaTek, Inc. MT6895, MT6897, MT6983, MT8188…

In the same product, most dangerous first.

CVE-2023-20846—CVE-2023-20846EPSS 0.1%CVE-2023-20843—CVE-2023-20843EPSS 0.1%CVE-2023-20847—CVE-2023-20847EPSS 0.1%