CVE-2023-20619

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-667

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-20626.2Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-ECVE-2023-206204.1In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execCVE-2023-206216.7In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2023-206236.4In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additiCVE-2023-206246.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2023-206256.4In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution priCVE-2023-206266.7In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SysCVE-2023-206276.7In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2023-206286.7In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with SystemCVE-2023-20637.3Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNetCVE-2023-206306.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-206326.7In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System
CVE-2023-20619: Medium severity, CVSS 6.7 | Vulnix