Out-of-Bounds Write in CDMA PPP: Remote Privilege Escalation
CVE-2023-20819 Published on October 2, 2023

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003.

NVD

Vulnerability Analysis

CVE-2023-20819 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

HIGH

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2023-20819 has been classified to as a Memory Corruption vulnerability or weakness.

Products Associated with CVE-2023-20819

Want to know whenever a new CVE is published for MediaTek products? stack.watch will email you.

MediaTek Lr11

MediaTek Lr12a

MediaTek Lr13

MediaTek Nr15

MediaTek Nr16

MediaTek Nr17

Affected Versions

MediaTek, Inc. MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737, MT6737M, MT6738, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6757, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6795, MT6797, MT6799, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6983, MT6985, MT6989, MT8666, MT8666A, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8786, MT8788, MT8788T, MT8788X, MT8788Z, MT8791, MT8791T, MT8797, MT8798:

Version Modem LR11, LR12A, LR13, NR15, NR16, NR17 is affected.

mediatek mt2731:

Before and including * is affected.

mediatek mt6570:

Before and including * is affected.

mediatek mt6580:

Before and including * is affected.

mediatek mt6595:

Before and including * is affected.

mediatek mt6732:

Before and including * is affected.

mediatek mt6735:

Before and including * is affected.

mediatek mt6737:

Before and including * is affected.

mediatek mt6737m:

Before and including * is affected.

mediatek mt6738:

Before and including * is affected.

mediatek mt6739:

Before and including * is affected.

mediatek mt6750:

Before and including * is affected.

mediatek mt6750s:

Before and including * is affected.

mediatek mt6752:

Before and including * is affected.

mediatek mt6753:

Before and including * is affected.

mediatek mt6755:

Before and including * is affected.

mediatek mt6757:

Before and including * is affected.

mediatek mt6758:

Before and including * is affected.

mediatek mt6761:

Before and including * is affected.

mediatek mt6762:

Before and including * is affected.

mediatek mt6762d:

Before and including * is affected.

mediatek mt6762m:

Before and including * is affected.

mediatek mt6763:

Before and including * is affected.

mediatek mt6765:

Before and including * is affected.

mediatek mt6765t:

Before and including * is affected.

mediatek mt6767:

Before and including * is affected.

mediatek mt6768:

Before and including * is affected.

mediatek mt6769:

Before and including * is affected.

mediatek mt6769t:

Before and including * is affected.

mediatek mt6769z:

Before and including * is affected.

mediatek mt6771:

Before and including * is affected.

mediatek mt6775:

Before and including * is affected.

mediatek mt6779:

Before and including * is affected.

mediatek mt6781:

Before and including * is affected.

mediatek mt6783:

Before and including * is affected.

mediatek mt6785:

Before and including * is affected.

mediatek mt6785t:

Before and including * is affected.

mediatek mt6789:

Before and including * is affected.

mediatek mt6795:

Before and including * is affected.

mediatek mt6797:

Before and including * is affected.

mediatek mt6799:

Before and including * is affected.

mediatek mt6813:

Before and including * is affected.

mediatek mt6815:

Before and including * is affected.

mediatek mt6833:

Before and including * is affected.

mediatek mt6835:

Before and including * is affected.

mediatek mt6853:

Before and including * is affected.

mediatek mt6855:

Before and including * is affected.

mediatek mt6873:

Before and including * is affected.

mediatek mt6875:

Before and including * is affected.

mediatek mt6875t:

Before and including * is affected.

mediatek mt6877:

Before and including * is affected.

mediatek mt6878:

Before and including * is affected.

mediatek mt6879:

Before and including * is affected.

mediatek mt6883:

Before and including * is affected.

mediatek mt6885:

Before and including * is affected.

mediatek mt6886:

Before and including * is affected.

mediatek mt6889:

Before and including * is affected.

mediatek mt6891:

Before and including * is affected.

mediatek mt6893:

Before and including * is affected.

mediatek mt6895:

Before and including * is affected.

mediatek mt6895t:

Before and including * is affected.

mediatek mt6896:

Before and including * is affected.

mediatek mt6897:

Before and including * is affected.

mediatek mt6983:

Before and including * is affected.

mediatek mt6985:

Before and including * is affected.

mediatek mt6989:

Before and including * is affected.

mediatek mt8666:

Before and including * is affected.

mediatek mt8666a:

Before and including * is affected.

mediatek mt8667:

Before and including * is affected.

mediatek mt8673:

Before and including * is affected.

mediatek mt8675:

Before and including * is affected.

mediatek mt8765:

Before and including * is affected.

mediatek mt8766:

Before and including * is affected.

mediatek mt8766z:

Before and including * is affected.

mediatek mt8768:

Before and including * is affected.

mediatek mt8768a:

Before and including * is affected.

mediatek mt8768b:

Before and including * is affected.

mediatek mt8768t:

Before and including * is affected.

mediatek mt8768z:

Before and including * is affected.

mediatek mt8781:

Before and including * is affected.

mediatek mt8786:

Before and including * is affected.

mediatek mt8788:

Before and including * is affected.

mediatek mt8788t:

Before and including * is affected.

mediatek mt8788x:

Before and including * is affected.

mediatek mt8788z:

Before and including * is affected.

mediatek mt8791:

Before and including * is affected.

mediatek mt8791t:

Before and including * is affected.

mediatek mt8797:

Before and including * is affected.

mediatek mt8798:

Before and including * is affected.

Exploit Probability

EPSS

1.54%

Percentile

81.16%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

Out-of-Bounds Write in CDMA PPP: Remote Privilege EscalationCVE-2023-20819 Published on October 2, 2023

Vulnerability Analysis

Weakness Type

What is a Memory Corruption Vulnerability?

Products Associated with CVE-2023-20819

Affected Versions

Exploit Probability

Out-of-Bounds Write in CDMA PPP: Remote Privilege Escalation
CVE-2023-20819 Published on October 2, 2023