medium4.4
CVE-2023-20790
In nvram, there is a possible out of bounds write due to a missing bounds check.
Impact
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Yocto | Versions 2.6, 3.3 |
| Rdkcentral | Rdk-B | Version 2022q3 |
| Android | Versions 12.0, 13.0 | |
| Openwrt | Openwrt | Versions 19.07.0, 21.02.0 |