Vulnerability

CVE-2023-20790

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

4.4

Severity (Android)

N/A

Chipsets

97

Devices

1615

Affected Hardware

NameAlso known asManufacturer
MT6739
MediaTek
MT6761V/WE
Helio A20
MediaTek
MT6761V/WAB
Helio A22
MediaTek
MT6761V/WBB
Helio A22
MediaTek
MT6762V/WB
Helio A25
MediaTek
MT6762V/WD
Helio A25
MediaTek
MT6762
Helio P22
MediaTek
MT6763/6763T
Helio P23
MediaTek
MT6765
Helio P35
MediaTek
MT6771
Helio P60
MediaTek
97 of 97 row(s) shown.

Rows per page

Page 1 of 10

Timeline

Introduced (est):
Jul 1, 2017
Reported:
Unknown
Advisory Published:
Aug 7, 2023
CVE Published:
Aug 7, 2023
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter