CVE-2023-20689

HIGH

Yocto - Remote Denial of Service via Integer Overflow

Title source: llm

Description

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664741; Issue ID: ALPS07664741.

References (1)

Core 1

Core References

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/July-2023

Scores

CVSS v3 7.5

EPSS 0.0155

EPSS Percentile 81.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-190

Status published

Products (2)

google/android 11.0

linuxfoundation/yocto 4.0

Published Jul 04, 2023

Tracked Since Feb 18, 2026