[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOidPY0oskizxRSunuP-J1peIa21xOlfz4cTTz9IaKuo":3,"g5a-risk:CVE-2023-20848":170},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":86,"references":87,"referencesCount":93,"weaknesses":94,"weaknessesCount":93,"isActivelyExploited":103,"cisaInfo":27,"otxData":27,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":165,"notableEvents":166},"CVE-2023-20848","What is CVE-2023-20848?","In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340433.","In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System ex...","2023-09-04T03:15:11.83","2024-10-21T18:35:06.753",6.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","HIGH","REQUIRED","UNCHANGED","MEDIUM",null,0.6,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00103,[34,34,34,34,34,34,34],"Medium",[38,43,48,53,56,61,65,68,71,74,77,80,83],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"linuxfoundation","yocto","4.0","cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mediatek","iot_yocto","23.0","cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"google","android","11.0","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"12.0","cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"linux","linux_kernel","6.1","cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",{"vendor":44,"product":62,"version":63,"criteria":64,"vulnerable":4},"mt2713","-","cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*",{"vendor":44,"product":66,"version":63,"criteria":67,"vulnerable":4},"mt6895","cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",{"vendor":44,"product":69,"version":63,"criteria":70,"vulnerable":4},"mt6897","cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",{"vendor":44,"product":72,"version":63,"criteria":73,"vulnerable":4},"mt6983","cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",{"vendor":44,"product":75,"version":63,"criteria":76,"vulnerable":4},"mt8188","cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",{"vendor":44,"product":78,"version":63,"criteria":79,"vulnerable":4},"mt8195","cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",{"vendor":44,"product":81,"version":63,"criteria":82,"vulnerable":4},"mt8395","cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",{"vendor":44,"product":84,"version":63,"criteria":85,"vulnerable":4},"mt8781","cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",13,[88],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fcorp.mediatek.com\u002Fproduct-security-bulletin\u002FSeptember-2023","Mediatek",[92],"Vendor Advisory",1,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2023-20848? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20848, a medium severity cyber security vulnerability from 2023. In imgsys_cmdq, there is a possible out of bounds read du...","CVE-2023-20848, CVE-2023-20848 vulnerability, CVE-2023-20848 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, linuxfoundation security, mediatek security, google security, linux security, yocto vulnerability, iot_yocto vulnerability, android vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2023-20848",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20848","Cybersecurity","CVE-2023-20848, CVE-2023-20848 vulnerability, CVE-2023-20848 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131],{"Operator":132,"Negate":27,"Nodes":133},"AND",[134,147],{"Operator":135,"Negate":27,"CPEMatch":136},"OR",[137,139,141,143,145],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"437D8F9D-67DF-47A5-9C96-5B51D1562951",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C9ED712-53EF-4AF7-AB45-A87B50F6BE16",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"109DD7FD-3A48-4C3D-8E1A-4433B98E1E64",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F8FB8EE9-FC56-4D5E-AE55-A5967634740C",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DE093B34-F4CD-4052-8122-730D6537A91A",{"Operator":135,"Negate":27,"CPEMatch":148},[149,151,153,155,157,159,161,163],{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7D1135F9-E38C-4308-BD32-A4D83959282E",{"Vulnerable":27,"Criteria":67,"MatchCriteriaID":152,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",{"Vulnerable":27,"Criteria":70,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A7D8055-F4B6-41EE-A078-11D56285AB66",{"Vulnerable":27,"Criteria":73,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",{"Vulnerable":27,"Criteria":76,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BA3D4A45-38EE-4125-AE67-89D1C707F95A",{"Vulnerable":27,"Criteria":79,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ED210E64-6CE7-42B1-849E-68C0E22521F6",{"Vulnerable":27,"Criteria":82,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89",{"Vulnerable":27,"Criteria":85,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"533284E5-C3AF-48D3-A287-993099DB2E41",[],[],{"lastModified":11,"cacheTime":168,"version":169},1792443202891,"2.0",{"score":171,"band":172,"action":173,"scoredAt":174},20,"Low","Monitor","2026-10-16T06:59:02.409585+00:00"]