CVSS: 4.4EPSS: 0%CPEs: 13EXPL: 0CVE-2023-20798
https://notcve.org/view.php?id=CVE-2023-20798
In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076. • https://corp.mediatek.com/product-security-bulletin/August-2023 • CWE-125: Out-of-bounds Read CWE-131: Incorrect Calculation of Buffer Size •
CVSS: 4.4EPSS: 0%CPEs: 71EXPL: 0CVE-2023-20790
https://notcve.org/view.php?id=CVE-2023-20790
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194. • https://corp.mediatek.com/product-security-bulletin/August-2023 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 36EXPL: 0CVE-2023-20786
https://notcve.org/view.php?id=CVE-2023-20786
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811. • https://corp.mediatek.com/product-security-bulletin/August-2023 • CWE-787: Out-of-bounds Write •