CVE-2023-20685 (published 2023-04-06T00:00:00)
In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575.
Affected products: Vendor: MediaTek, Inc.
Product: MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT8781, MT8795T, MT8798, MT8891
Versions: Android 12.0, 13.0