← Back

CVE-2023-20811

nvd nist
Published: Aug 7, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.

Affected (3)

Google
1 product
Android
Linux
1 product
Linux Kernel
Configuration A
3 vulnerable · 52 platform
Vulnerable SoftwareAffected Versions
Google
Android
Version 10.0
Android
Version 11.0
Linux Kernel
Version 4.19
Running on/withPlatform Versions
Mediatek
Mt5221
All versions
Mediatek
Mt5583
All versions
Mediatek
Mt5691
All versions
Mediatek
Mt5695
All versions
Mediatek
Mt9010
All versions
Mediatek
Mt9011
All versions
Mediatek
Mt9012
All versions
Mediatek
Mt9016
All versions
Mediatek
Mt9020
All versions
Mediatek
Mt9021
All versions
Mediatek
Mt9022
All versions
Mediatek
Mt9030
All versions
Mediatek
Mt9031
All versions
Mediatek
Mt9032
All versions
Mediatek
Mt9216
All versions
Mediatek
Mt9218
All versions
Mediatek
Mt9220
All versions
Mediatek
Mt9221
All versions
Mediatek
Mt9222
All versions
Mediatek
Mt9255
All versions
Mediatek
Mt9256
All versions
Mediatek
Mt9266
All versions
Mediatek
Mt9269
All versions
Mediatek
Mt9286
All versions
Mediatek
Mt9288
All versions
Mediatek
Mt9602
All versions
Mediatek
Mt9610
All versions
Mediatek
Mt9611
All versions
Mediatek
Mt9612
All versions
Mediatek
Mt9613
All versions
Mediatek
Mt9615
All versions
Mediatek
Mt9617
All versions
Mediatek
Mt9618
All versions
Mediatek
Mt9629
All versions
Mediatek
Mt9630
All versions
Mediatek
Mt9631
All versions
Mediatek
Mt9632
All versions
Mediatek
Mt9636
All versions
Mediatek
Mt9638
All versions
Mediatek
Mt9639
All versions
Mediatek
Mt9649
All versions
Mediatek
Mt9650
All versions
Mediatek
Mt9652
All versions
Mediatek
Mt9653
All versions
Mediatek
Mt9666
All versions
Mediatek
Mt9667
All versions
Mediatek
Mt9669
All versions
Mediatek
Mt9671
All versions
Mediatek
Mt9675
All versions
Mediatek
Mt9685
All versions
Mediatek
Mt9686
All versions
Mediatek
Mt9688
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: security@mediatek.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.