[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLPmckXRcg4sFJemCBAdbvxhQ3tKWSwZ5K3eUK5W-7jQ":3,"g5a-risk:CVE-2023-20840":165},{"success":4,"data":5,"meta":162},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":80,"references":81,"referencesCount":87,"weaknesses":88,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":27,"otxData":27,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":160,"notableEvents":161},"CVE-2023-20840","What is CVE-2023-20840?","In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326430; Issue ID: ALPS07326430.","In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with Syst...","2023-09-04T03:15:10.827","2024-10-21T18:35:04.043",6.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","HIGH","REQUIRED","UNCHANGED","MEDIUM",null,0.6,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00103,[34,34,34,34,34,34,34],"Medium",[38,43,48,53,56,61,65,68,71,74,77],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"linuxfoundation","yocto","4.0","cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mediatek","iot_yocto","23.0","cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"google","android","11.0","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"12.0","cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"linux","linux_kernel","6.1","cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",{"vendor":44,"product":62,"version":63,"criteria":64,"vulnerable":4},"mt6895","-","cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",{"vendor":44,"product":66,"version":63,"criteria":67,"vulnerable":4},"mt6897","cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",{"vendor":44,"product":69,"version":63,"criteria":70,"vulnerable":4},"mt6983","cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",{"vendor":44,"product":72,"version":63,"criteria":73,"vulnerable":4},"mt8188","cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",{"vendor":44,"product":75,"version":63,"criteria":76,"vulnerable":4},"mt8195","cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",{"vendor":44,"product":78,"version":63,"criteria":79,"vulnerable":4},"mt8395","cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",11,[82],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fcorp.mediatek.com\u002Fproduct-security-bulletin\u002FSeptember-2023","Mediatek",[86],"Vendor Advisory",1,[89,97],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":98,"name":99,"description":100,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.",2,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2023-20840? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20840, a medium severity cyber security vulnerability from 2023. In imgsys, there is a possible out of bounds read and wri...","CVE-2023-20840, CVE-2023-20840 vulnerability, CVE-2023-20840 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, linuxfoundation security, mediatek security, google security, linux security, yocto vulnerability, iot_yocto vulnerability, android vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2023-20840",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20840","Cybersecurity","CVE-2023-20840, CVE-2023-20840 vulnerability, CVE-2023-20840 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130],{"Operator":131,"Negate":27,"Nodes":132},"AND",[133,146],{"Operator":134,"Negate":27,"CPEMatch":135},"OR",[136,138,140,142,144],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"437D8F9D-67DF-47A5-9C96-5B51D1562951",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C9ED712-53EF-4AF7-AB45-A87B50F6BE16",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"109DD7FD-3A48-4C3D-8E1A-4433B98E1E64",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F8FB8EE9-FC56-4D5E-AE55-A5967634740C",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DE093B34-F4CD-4052-8122-730D6537A91A",{"Operator":134,"Negate":27,"CPEMatch":147},[148,150,152,154,156,158],{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",{"Vulnerable":27,"Criteria":67,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A7D8055-F4B6-41EE-A078-11D56285AB66",{"Vulnerable":27,"Criteria":70,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",{"Vulnerable":27,"Criteria":73,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BA3D4A45-38EE-4125-AE67-89D1C707F95A",{"Vulnerable":27,"Criteria":76,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ED210E64-6CE7-42B1-849E-68C0E22521F6",{"Vulnerable":27,"Criteria":79,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89",[],[],{"lastModified":11,"cacheTime":163,"version":164},1792443208487,"2.0",{"score":166,"band":167,"action":168,"scoredAt":169},20,"Low","Monitor","2026-10-16T06:59:02.407178+00:00"]