CVE-2023-20811 (GCVE-0-2023-20811)

Vulnerability from cvelistv5 – Published: 2023-08-07 03:22 – Updated: 2024-12-04 15:11
VLAI
Summary
In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-12-04 15:11 UTC
CWE
  • Elevation of Privilege
Assigner
References
Impacted products
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:14:41.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-20811",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-04T15:11:33.415387Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-04T15:11:49.404Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT9016, MT9020, MT9021, MT9022, MT9030, MT9031, MT9032, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9666, MT9667, MT9669, MT9671, MT9675, MT9685, MT9686, MT9688",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 10.0, 11.0 / Linux 4.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-07T03:22:00.788Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2023-20811",
    "datePublished": "2023-08-07T03:22:00.788Z",
    "dateReserved": "2022-10-28T02:03:23.672Z",
    "dateUpdated": "2024-12-04T15:11:49.404Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-20811",
      "date": "2026-09-21",
      "epss": "0.00093",
      "percentile": "0.0063"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT9016, MT9020, MT9021, MT9022, MT9030, MT9031, MT9032, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9666, MT9667, MT9669, MT9671, MT9675, MT9685, MT9686, MT9688",
                "vendor": "MediaTek, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Android 10.0, 11.0 / Linux 4.19"
                  }
                ]
              }
            ],
            "source": "security@mediatek.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "513F8951-3099-444A-9755-C3A75720EFD2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "518D4593-D5E2-489C-92C3-343716A621E9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt5583:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C394724-3294-4953-85C8-EE3894B5092C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt5691:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "96BD96BE-10BC-4C7E-8A48-C7CB08A61765",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt5695:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "75A56009-090B-4101-B000-224412058654",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9010:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EC50C1C-A31D-4EDF-AB6A-FA1E92AE7F2A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9011:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CEE06B45-7F23-4EB5-9885-4FCA0FC0D5C5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9012:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CBFB4E04-7BC0-4B48-ABD7-6971E4725895",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9016:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE1DD6A9-E503-4A8E-92FF-625CD734DBD6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9020:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1EAAF66C-9C81-498B-A0C0-3295CB7324A9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9021:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E1092AC-60EC-453C-9AA9-8F35A2A6DF92",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9022:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "350ED16A-35A5-4F54-A01F-6EADE58E5530",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9030:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "70D16AAC-938F-4BE8-B7BB-067249A6C197",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9031:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6D16B86F-32D2-4CA3-B18D-B19F63F14D5C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9032:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB388AFB-1185-4CF1-8023-C26E366F89DB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9216:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4B45803F-1AD2-47C8-BB9B-276628A0D605",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9218:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B028E80F-396F-4898-841D-9E99DE54FAC2",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9220:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6FB0DB25-6CFF-4688-B423-6CC0252C3B59",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9221:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B9E90123-D7DC-4C68-B2F9-27DCEDED2FC6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9222:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5B250A0A-BE50-45B6-AD72-8EA876F64DD4",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9255:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9C5A33A-7B04-4E14-A268-A717CD2420DA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9256:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAC84405-17EE-4C25-8477-317F2A6A095F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9266:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "85C42802-293E-448B-A059-DFDEF1D97EC2",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9269:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F19E7E64-721E-436B-B879-D1EDE5EFF84C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9286:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4CEEB709-8C7B-48AF-B359-9CE9C68790D5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9288:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6081A92B-4361-462A-9F7F-570AC7256CDB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9602:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "49ED757E-42DD-4176-B216-915EFD8E2F40",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9610:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6BA3286D-A136-4EB2-A181-6EF8A556EFDF",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9611:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A9F24C9-2A69-44D9-A16B-E4187230F984",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9612:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BD04E099-75F4-48F6-BB8C-28A5D6FB8F60",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9613:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E92602E3-1B1B-4683-801D-D151919C63EE",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9615:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0AF44498-001B-4A51-AB32-EBC206B14741",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9617:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F2E6E130-9F65-482B-AF8B-97DA81FCE19E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9618:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "311AFBA9-A0AD-4638-ACFF-0D4AC12FA127",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9629:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "47E5EE7B-1208-4007-AF87-6DC309FFE312",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9630:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9FE404F4-FFAE-4646-9234-15230F0577F1",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9631:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA834B63-F689-48BA-84E6-500351990BFD",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9632:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF1B3B37-22C4-42F4-8264-07512619D706",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9636:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "11B89606-5FD7-4513-984A-16217D37BF4B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9638:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76F4FC23-534B-449A-8344-1F13AE9C8C57",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9639:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "392C9A58-EAB1-44B5-B189-98C68CC23199",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9649:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C1C6E88C-46DD-45AB-88C1-B69FC0E25056",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9650:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2D0EF507-52A0-45D1-AC26-97F765E691FC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9652:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C826242C-440E-4D85-841E-570E9C69777C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9653:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "63BC3AE7-4180-4B8C-AB69-8AC4F502700D",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9666:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A4E9A32-6267-4AB3-B9A9-BBC79ED2F343",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9667:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD7AC916-FF8D-430D-837C-0587056198AB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9669:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8531FD76-C0C1-45FE-8FDC-26402FF8BFA5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9671:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94F5F738-459C-4316-80AF-1B9C33E0F36B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9675:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "046B7E06-8C40-4D37-8D10-4816E51CA143",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9685:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CFD9AD54-9F0F-414B-8936-3A981657D6AB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9686:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4B429106-36BE-42F2-8D05-FB9EF00BDFBA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt9688:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F7D78E76-6A3B-4736-B7E7-C9032CDA845B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061."
          }
        ],
        "id": "CVE-2023-20811",
        "lastModified": "2026-06-17T05:30:54.100",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-20811",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-04T15:11:33.415387Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-08-07T04:15:14.367",
        "references": [
          {
            "source": "security@mediatek.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
          }
        ],
        "sourceIdentifier": "security@mediatek.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T23:52:02+00:00",
      "cve": "CVE-2023-20811",
      "id": "CVE-2023-20811",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2023-20811",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-20811.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T09:14:41.212Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-20811",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-12-04T15:11:33.415387Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-22T20:11:51.373Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "MT5221, MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT9016, MT9020, MT9021, MT9022, MT9030, MT9031, MT9032, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9666, MT9667, MT9669, MT9671, MT9675, MT9685, MT9686, MT9688",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "Android 10.0, 11.0 / Linux 4.19"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Elevation of Privilege",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-08-07T03:22:00.788Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/August-2023"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2023-20811",
        "datePublished": "2023-08-07T03:22:00.788Z",
        "dateReserved": "2022-10-28T02:03:23.672Z",
        "dateUpdated": "2024-12-04T15:11:49.404Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.