CVE-2023-20693

HIGH

Yocto - Denial of Service via WLAN Firmware Exception

Title source: llm

Description

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664711; Issue ID: ALPS07664711.

References (1)

Core 1

Core References

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/July-2023

Scores

CVSS v3 7.5

EPSS 0.0155

EPSS Percentile 81.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-190

Status published

Products (3)

google/android 11.0

google/android 12.0

linuxfoundation/yocto 4.0

Published Jul 04, 2023

Tracked Since Feb 18, 2026