cve/2023/CVE-2023-20798.md

### [CVE-2023-20798](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20798)
![](https://img.shields.io/static/v1?label=Product&message=MT2713%2C%20MT6855%2C%20MT6879%2C%20MT6886%2C%20MT6895%2C%20MT6983%2C%20MT6985%2C%20MT8188%2C%20MT8195%2C%20MT8395%2C%20MT8673&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20Android%2012.0%2C%2013.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Information%20Disclosure&color=brighgreen)

### Description

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds