PT-2023-5745 · Mediatek · Nvram

CVE-2023-20790

·

Published

2023-08-07

·

Updated

2023-08-09

CVSS v3.1

4.4

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Nvram (affected versions not specified)
Description The issue is related to a missing bounds check in nvram, which could lead to a possible out of bounds write. This may result in local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation. The problem is associated with insufficient input validation in the Nvram component of the MediaTek firmware.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-06417
CVE-2023-20790

Affected Products

Nvram