CVE-2023-20741

Vulnerability

In the Radio Interface Layer (ril) component of MediaTek chipsets, an out-of-bounds read vulnerability exists due to a missing bounds check. This flaw can be triggered without user interaction and requires System execution privileges. The issue is identified by Patch ID ALPS07628591 and affects devices running vulnerable versions of the ril code as detailed in the June 2023 MediaTek Product Security Bulletin [1].

Exploitation

An attacker with System execution privileges can exploit this vulnerability by sending a crafted request to the ril component. The missing bounds check allows the attacker to read memory beyond the intended buffer, leading to information disclosure. No user interaction is required for exploitation.

Impact

Successful exploitation results in local information disclosure, potentially exposing sensitive data from kernel memory, such as credentials or other confidential information. The attacker gains access to data that should be protected, compromising confidentiality.

Mitigation

MediaTek has released a patch (ALPS07628591) as part of the June 2023 security update. Device OEMs have been notified and are expected to distribute the fix to end users. Users should apply the latest security update from their device manufacturer. No workaround is available [1].