CVE-2023-20702
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could...
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
- Record
CVE-2023-20702- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
CVE List
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
- Record
CVE-2023-20702- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-24881
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
- Record
EUVD-2023-24881- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-58wq-3769-jr35
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could...
In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.
- Record
GHSA-58wq-3769-jr35- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
- mediatek mt6835
- mediatek mt6873
- mediatek mt6875
- mediatek mt6879
- mediatek mt6883
- mediatek mt6885
- mediatek mt6886
- mediatek mt6889
- mediatek mt6895
- mediatek mt6980
- mediatek mt6983
- mediatek mt6985
Show 11 moreShow less
- mediatek mt6990
- mediatek mt8673
- mediatek mt8675
- mediatek mt8791
- mediatek mt8791t
- mediatek mt8797
- mediatek mt8798
- mediatek nr15
- mediatek nr16
- mediatek nr17
- mediatek, inc. mt6835, mt6873, mt6875, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6980, mt6983, mt6985, mt6990, mt8673, mt8675, mt8791, mt8791t, mt8797, mt8798
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
SoCVersion:0 up to SoCVersion:2023-11-05, plus listed versions SoCVersion |
SoCVersion:2023-11-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20702 is a high vulnerability (CVSS 7.5) in Mediatek Mt6835, published November 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. Fixed in :unknown: SoCVersion:2023-11-05.