Vulnerabilities > CVE-2023-20747 - Type Confusion vulnerability in multiple products

CVSS 4.4 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

linuxfoundation

google

CWE-843

NVD

Published: 2023-06-06

Updated: 2024-11-21

Summary

In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519103; Issue ID: ALPS07519121.

Vulnerable Configurations

Part	Description	Count
Application	Linuxfoundation Linuxfoundation IOT Yocto 22.2 Linuxfoundation Yocto 4.0	2
OS	Google Google Android 12.0 Google Android 13.0	2
Hardware	Mediatek Mediatek Mt5696 - Mediatek Mt5836 - Mediatek Mt5838 - Mediatek Mt6768 - Mediatek Mt6769 - Mediatek Mt6779 - Mediatek Mt6781 - Mediatek Mt6785 - Mediatek Mt6789 - Mediatek Mt6833 - Mediatek Mt6835 - Mediatek Mt6853 - Mediatek Mt6853T - Mediatek Mt6855 - Mediatek Mt6873 - Mediatek Mt6875 - Mediatek Mt6877 - Mediatek Mt6883 - Mediatek Mt6885 - Mediatek Mt6889 - Mediatek Mt6891 - Mediatek Mt6893 - Mediatek Mt8185 - Mediatek Mt8195 - Mediatek Mt8365 - Mediatek Mt8781 - Mediatek Mt8786 - Mediatek Mt8789 - Mediatek Mt8791 - Mediatek Mt8797 - Mediatek Mt9000 - Mediatek Mt9015 - Mediatek Mt9023 - Mediatek Mt9025 - Mediatek Mt9618 - Mediatek Mt9649 - Mediatek Mt9653 - Mediatek Mt9679 - Mediatek Mt9687 - Mediatek Mt9689 - Mediatek Mt9902 - Mediatek Mt9932 - Mediatek Mt9952 - Mediatek Mt9972 - Mediatek Mt9982 -	45

Common Weakness Enumeration (CWE)

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References