CVE-2023-20847

MEDIUM 4.2CVE-2023-20847 · Published 04/09/2023 · updated 17/06/2026

In short

CVE-2023-20847 is a MEDIUM (CVSS 4.2) vulnerability affecting yocto (linuxfoundation), iot yocto (mediatek).
Chance of exploitation in the next 30 days (EPSS): 0.10%, higher than 0.71% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
yocto linuxfoundation	`= 4.0`	No fix yet
iot yocto mediatek	`= 23.0`	No fix yet

Description

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354025; Issue ID: ALPS07340108.

References

corp.mediatek.com/product-security-bulletin/September-2023 · Vendor Advisory

More vulnerabilities in yocto

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

yocto

linuxfoundation

= 4.0

No fix yet

iot yocto

mediatek

= 23.0

No fix yet

More vulnerabilities in yocto

See all →