CVE-2023-20725

MEDIUM 6.7CVE-2023-20725 · Published 06/06/2023 · updated 17/06/2026

In short

CVE-2023-20725 is a MEDIUM (CVSS 6.7) vulnerability affecting rdk-b (rdkcentral).
Chance of exploitation in the next 30 days (EPSS): 0.09%, higher than 0.51% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
rdk-b rdkcentral	`= 2022q3`	No fix yet

Description

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only); Issue ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only).

References

corp.mediatek.com/product-security-bulletin/June-2023 · Vendor Advisory

More vulnerabilities in rdk-b

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

rdk-b

rdkcentral

= 2022q3

No fix yet

Description

More vulnerabilities in rdk-b

See all →