CVE-2023-20798

MEDIUM

Google Android - Information Disclosure

Title source: rule

Description

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.

References (1)

[Vendor Advisory] https://corp.mediatek.com/product-security-bulletin/August-2023

Scores

CVSS v3 4.4

EPSS 0.0002

EPSS Percentile 4.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-125 CWE-131

Status published

Affected Products (2)

google/android

Timeline

Published Aug 07, 2023

Tracked Since Feb 18, 2026