CVE-2023-20702

In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.

Affected

MediaTek, Inc. · MT6835, MT6873, MT6875, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6980, MT6983, MT6985, MT6990, MT8673, MT8675, MT8791, MT8791T, MT8797, MT8798

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

1.08% chance of exploitation in the next 30 days, 65th percentile

Published

2023-11-06

Updated

2024-09-05

Proof-of-concept exploits (1)

• asset-group/Sni5Gect-5GNR-sniffing-and-exploitation315★ · 2026-06-16

Security advisories

• https://corp.mediatek.com/product-security-bulletin/November-2023

References

• CVE Record
• NVD entry

Related

• CVE-2023-32842
• CVE-2023-32843
• CVE-2023-32845
• CVE-2024-20003