[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQesyS4G3FLj79dFKKwIO9QEo_OCJdYrgW-KRMua_fLI":3,"g5a-risk:CVE-2023-20842":170},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":86,"references":87,"referencesCount":93,"weaknesses":94,"weaknessesCount":93,"isActivelyExploited":103,"cisaInfo":27,"otxData":27,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":165,"notableEvents":166},"CVE-2023-20842","What is CVE-2023-20842?","In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354259; Issue ID: ALPS07340477.","In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System e...","2023-09-04T03:15:11.163","2024-10-21T18:35:05.873",6.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","HIGH","REQUIRED","UNCHANGED","MEDIUM",null,0.6,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00103,[34,34,34,34,34,34,34],"Medium",[38,43,48,53,56,61,65,68,71,74,77,80,83],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"linuxfoundation","yocto","4.0","cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mediatek","iot_yocto","23.0","cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"google","android","11.0","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"12.0","cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"linux","linux_kernel","6.1","cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",{"vendor":44,"product":62,"version":63,"criteria":64,"vulnerable":4},"mt2713","-","cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*",{"vendor":44,"product":66,"version":63,"criteria":67,"vulnerable":4},"mt6895","cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",{"vendor":44,"product":69,"version":63,"criteria":70,"vulnerable":4},"mt6897","cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",{"vendor":44,"product":72,"version":63,"criteria":73,"vulnerable":4},"mt6983","cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",{"vendor":44,"product":75,"version":63,"criteria":76,"vulnerable":4},"mt8188","cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",{"vendor":44,"product":78,"version":63,"criteria":79,"vulnerable":4},"mt8195","cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",{"vendor":44,"product":81,"version":63,"criteria":82,"vulnerable":4},"mt8395","cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",{"vendor":44,"product":84,"version":63,"criteria":85,"vulnerable":4},"mt8781","cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",13,[88],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fcorp.mediatek.com\u002Fproduct-security-bulletin\u002FSeptember-2023","Mediatek",[92],"Vendor Advisory",1,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2023-20842? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20842, a medium severity cyber security vulnerability from 2023. In imgsys_cmdq, there is a possible out of bounds write d...","CVE-2023-20842, CVE-2023-20842 vulnerability, CVE-2023-20842 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, linuxfoundation security, mediatek security, google security, linux security, yocto vulnerability, iot_yocto vulnerability, android vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2023-20842",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20842","Cybersecurity","CVE-2023-20842, CVE-2023-20842 vulnerability, CVE-2023-20842 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131],{"Operator":132,"Negate":27,"Nodes":133},"AND",[134,147],{"Operator":135,"Negate":27,"CPEMatch":136},"OR",[137,139,141,143,145],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"437D8F9D-67DF-47A5-9C96-5B51D1562951",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C9ED712-53EF-4AF7-AB45-A87B50F6BE16",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"109DD7FD-3A48-4C3D-8E1A-4433B98E1E64",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F8FB8EE9-FC56-4D5E-AE55-A5967634740C",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DE093B34-F4CD-4052-8122-730D6537A91A",{"Operator":135,"Negate":27,"CPEMatch":148},[149,151,153,155,157,159,161,163],{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7D1135F9-E38C-4308-BD32-A4D83959282E",{"Vulnerable":27,"Criteria":67,"MatchCriteriaID":152,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",{"Vulnerable":27,"Criteria":70,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A7D8055-F4B6-41EE-A078-11D56285AB66",{"Vulnerable":27,"Criteria":73,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",{"Vulnerable":27,"Criteria":76,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BA3D4A45-38EE-4125-AE67-89D1C707F95A",{"Vulnerable":27,"Criteria":79,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ED210E64-6CE7-42B1-849E-68C0E22521F6",{"Vulnerable":27,"Criteria":82,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89",{"Vulnerable":27,"Criteria":85,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"533284E5-C3AF-48D3-A287-993099DB2E41",[],[],{"lastModified":11,"cacheTime":168,"version":169},1792443239293,"2.0",{"score":171,"band":172,"action":173,"scoredAt":174},20,"Low","Monitor","2026-10-16T06:59:02.407791+00:00"]