CVE-2023-20766

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Jul 4, 2023
Updated: Jul 10, 2023
CWE ID 787

Summary

CVE-2023-20766 is a vulnerability affecting the gps software. It involves a missing bounds check, leading to an out-of-bounds write condition. This issue can result in local privilege escalation, granting System execution privileges to an attacker. Notably, user interaction is not required for exploitation. The patch for this vulnerability is identified as ALPS07573237, and the related issue ID is ALPS07573202.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share