CVE-2023-20728 | MediaTek MT8797 WLAN out-of-bounds (ALPS07573603)

A vulnerability, which was classified as problematic, was found in MediaTek MT6781, MT6789, MT6833, MT6835, MT6855, MT6877, MT6879, MT6886, MT6895, MT6983, MT6985, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8168, MT8175, MT8185, MT8195, MT8362A, MT8365, MT8385, MT8395, MT8518, MT8532, MT8673, MT8675, MT8695, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T and MT8797. Affected is an unknown function of the component WLAN. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2023-20728. Attacking locally is a requirement. There is no exploit available.

It is recommended to apply a patch to fix this issue.