PT-2023-5548 · Power · Power

Published 2023-08-07 · Updated 2023-08-09 · CVE-2023-20796

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions In power (affected versions not specified)

Description The issue is related to a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2023-06199

CVE-2023-20796

Affected Products

Power

References · 5

• https://corp.mediatek.com/product-security-bulletin/August-2023 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06199 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20796 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20796 · Vendor Advisory
• https://t.me/cvenotify/55890 · Telegram Post