74 lines
2.6 KiB
JSON
74 lines
2.6 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2023-20724",
|
|
"assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "MediaTek",
|
|
"dateReserved": "2022-10-28T02:03:10.766Z",
|
|
"datePublished": "2023-06-06T12:12:03.117Z",
|
|
"dateUpdated": "2024-08-02T09:14:40.505Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
|
|
"shortName": "MediaTek",
|
|
"dateUpdated": "2023-06-06T12:12:03.117Z"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07843845; Issue ID: ALPS07843841."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "MediaTek, Inc.",
|
|
"product": "MT8167, MT8175, MT8183",
|
|
"versions": [
|
|
{
|
|
"version": "Android 11.0, 12.0, 13.0",
|
|
"status": "affected"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://corp.mediatek.com/product-security-bulletin/June-2023"
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"type": "text",
|
|
"lang": "en",
|
|
"description": "Elevation of Privilege"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-02T09:14:40.505Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"url": "https://corp.mediatek.com/product-security-bulletin/June-2023",
|
|
"tags": [
|
|
"x_transferred"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
} |