Main Vulnerability Database Vulnerabilities #VU82808

NULL Pointer Dereference in MediaTek products - CVE-2023-20702

Published: November 7, 2023

Vulnerability identifier: #VU82808

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20702

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to lack of error handling within 5G RLC. A local application can perform service disruption.

MT6980
MT8798
MT8791T
MT8791
MT8675
MT8673
MT6990
MT6985
MT6983
MT6835
MT6895
MT6886
MT6879
MT8797
MT6889
MT6885
MT6883
MT6875
MT6873
Google Android

Install security update from vendor's website.

Google Android - addressed in versions 11 2023-11-05, 12L 2023-11-05, 12 2023-11-05, 13 2023-11-05, 14 2023-11-05