[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-20845":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":21,"cwes":22,"cpes":24,"technologies":36,"references":47,"score":49,"epss_score":50,"epss_percentile":51,"is_kev":21,"cisa_kev_date_added":52,"cisa_kev_due_date":52,"cisa_ssvc":53,"attack_mappings":63,"exploits":70},324584,"CVE-2023-20845","EUVD-2023-25024","In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07197795; Issue ID: ALPS07340357.","2023-09-04T03:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":20,"confidentialityImpact":20},"UNCHANGED","3.1",4.2,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NONE","REQUIRED","LOW","HIGH",false,[23],"CWE-125",[25,26,27,28,29,30,31,32,33,34,35],"cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*","cpe:2.3:a:mediatek:iot_yocto:23.0:*:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*","cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",[37,38,39,40,41,42,43,44,45,46],"Mediatek Iot Yocto","Mediatek Mt6897","Mediatek Mt6983","Mediatek Mt8188","Google Android","Mediatek Mt6895","Mediatek Mt8195","Linux Linux Kernel","Mediatek Mt8395","Linuxfoundation Yocto",[48],"https:\u002F\u002Fcorp.mediatek.com\u002Fproduct-security-bulletin\u002FSeptember-2023",0.21,0.001,0.00852,null,{"timestamp":54,"automatable":55,"tech_impact":56,"exploitation":57,"cisa_decision":58,"cisa_remediation_timeline":62},"2024-10-08T14:00:27.692507Z","no","partial","none",{"vector":59,"decision":60,"priority":61},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T16:46:38.174736\u002F","track_star","medium","60D",[64],{"name":65,"source":66,"tactics":67,"technique_id":69},"Exploitation for Privilege Escalation","attack_vector",[68],"privilege-escalation","T1068",[]]