{"id":"CVE-2023-20702","aliases":["A-298879043","ASB-A-298879043","EUVD-2023-24881","GHSA-58wq-3769-jr35","M-MOLY00921261"],"status":"published","title":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could...","description":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01299,"percentile":0.70627,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-11-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-11-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-11-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"mediatek","product":"mt6835"},{"vendor":"mediatek","product":"mt6873"},{"vendor":"mediatek","product":"mt6875"},{"vendor":"mediatek","product":"mt6879"},{"vendor":"mediatek","product":"mt6883"},{"vendor":"mediatek","product":"mt6885"},{"vendor":"mediatek","product":"mt6886"},{"vendor":"mediatek","product":"mt6889"},{"vendor":"mediatek","product":"mt6895"},{"vendor":"mediatek","product":"mt6980"},{"vendor":"mediatek","product":"mt6983"},{"vendor":"mediatek","product":"mt6985"},{"vendor":"mediatek","product":"mt6990"},{"vendor":"mediatek","product":"mt8673"},{"vendor":"mediatek","product":"mt8675"},{"vendor":"mediatek","product":"mt8791"},{"vendor":"mediatek","product":"mt8791t"},{"vendor":"mediatek","product":"mt8797"},{"vendor":"mediatek","product":"mt8798"},{"vendor":"mediatek","product":"nr15"},{"vendor":"mediatek","product":"nr16"},{"vendor":"mediatek","product":"nr17"},{"vendor":"mediatek, inc.","product":"mt6835, mt6873, mt6875, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6980, mt6983, mt6985, mt6990, mt8673, mt8675, mt8791, mt8791t, mt8797, mt8798"}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/November-2023","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20702"},{"url":"https://github.com/advisories/GHSA-58wq-3769-jr35"},{"url":"https://source.android.com/security/bulletin/2023-11-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-20702","description":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.","status":"published","published":"2023-11-06T03:50:51.533Z","modified":"2024-09-05T15:17:22.422Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-24881","description":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.","status":"published","published":"2023-11-06T03:50:51Z","modified":"2024-09-05T15:17:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:03.195853Z"}],"ghsa":[{"id":"GHSA-58wq-3769-jr35","title":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could...","description":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.","status":"published","published":"2023-11-06T06:30:26Z","modified":"2023-11-13T21:30:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:55:00.635955Z"}],"nvd":[{"id":"CVE-2023-20702","description":"In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.","status":"published","published":"2023-11-06T04:15:07.653Z","modified":"2026-06-17T05:30:40.65Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:43.669554Z"}],"osv":[{"id":"ASB-A-298879043","status":"published","published":"2023-11-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:15.724291Z"}]}}