PT-2023-5745 · Mediatek · Nvram

CVE-2023-20790

·

Publicado

2023-08-07

·

Atualizado

2023-08-09

CVSS v3.1

4.4

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Nvram (affected versions not specified)
Description The issue is related to a missing bounds check in nvram, which could lead to a possible out of bounds write. This may result in local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation. The problem is associated with insufficient input validation in the Nvram component of the MediaTek firmware.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-06417
CVE-2023-20790

Produtos afetados

Nvram