CVE-2023-20614

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-206156.7In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206166.7In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System executionCVE-2023-206186.7In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System executioCVE-2023-206196.7In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System executioCVE-2023-20626.2Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-ECVE-2023-206204.1In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execCVE-2023-206216.7In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2023-206236.4In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additiCVE-2023-206246.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2023-206256.4In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution priCVE-2023-206266.7In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SysCVE-2023-206276.7In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with
CVE-2023-20614: Medium severity, CVSS 6.7 | Vulnix