SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-20796

In power, there is a possible memory corruption due to an incorrect bounds check.

MEDIUM 4.4EPSS 0.09%

Does this matter?

Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.

Description

In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.

CVSS 3.1
4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
0.09% probability · 0th percentile
CISA KEV
Not listed
Weakness
CWE-787
Affected
linuxfoundation/yocto · rdkcentral/rdk-b · google/android · openwrt/openwrt
Source
security@mediatek.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.