CVE-2023-20737

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645167.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
MediaTek, Inc.	MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8365, MT8395	Android 12.0, 13.0 / Yocto 4.0 / Iot-Yocto 22.2

References

https://corp.mediatek.com/product-security-bulletin/June-2023Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/June-2023Vendor Advisory

Timeline

Published: Jun 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-207386.7In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2023-207396.7In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution p CVE-2023-20749.8A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue i CVE-2023-207406.7In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution p CVE-2023-207414.4In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System ex CVE-2023-207424.4In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System ex CVE-2023-207436.7In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execut CVE-2023-207446.7In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution priv CVE-2023-207456.7In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execut CVE-2023-207466.7In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execut CVE-2023-207474.4In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privil CVE-2023-207484.4In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with Syste