Lucene search
MediaTekCVE-2024-20022HistoryMar 04, 2024 - 3:15 a.m.
CVE-2024-20022
2024-03-0403:15:07
MediaTek
web.nvd.nist.gov
36
cve-2024-20022
escalation of privilege
missing bounds check
alps08528255
nvd
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt2737_firmware
ORmediatekmt6789_firmware
ORmediatekmt6835_firmware
ORmediatekmt6855_firmware
ORmediatekmt6879_firmware
ORmediatekmt6880_firmware
ORmediatekmt6886_firmware
ORmediatekmt6890_firmware
ORmediatekmt6895_firmware
ORmediatekmt6980_firmware
ORmediatekmt6983_firmware
ORmediatekmt6985_firmware
ORmediatekmt6989_firmware
ORmediatekmt6990_firmware
ORmediatekmt8321_firmware
ORmediatekmt8385_firmware
ORmediatekmt8666_firmware
ORmediatekmt8667_firmware
ORmediatekmt8673_firmware
ORmediatekmt8765_firmware
ORmediatekmt8766_firmware
ORmediatekmt8768_firmware
ORmediatekmt8781_firmware
ORmediatekmt8786_firmware
ORmediatekmt8788_firmware
ORmediatekmt8789_firmware
ORmediatekmt8791_firmware
ORmediatekmt8796_firmware
ORmediatekmt8797_firmware
ORmediatekmt8798_firmware
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt2737_firmware | * | cpe:2.3:a:mediatek:mt2737_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6789_firmware | * | cpe:2.3:a:mediatek:mt6789_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6835_firmware | * | cpe:2.3:a:mediatek:mt6835_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6855_firmware | * | cpe:2.3:a:mediatek:mt6855_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6879_firmware | * | cpe:2.3:a:mediatek:mt6879_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6880_firmware | * | cpe:2.3:a:mediatek:mt6880_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6886_firmware | * | cpe:2.3:a:mediatek:mt6886_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6890_firmware | * | cpe:2.3:a:mediatek:mt6890_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6895_firmware | * | cpe:2.3:a:mediatek:mt6895_firmware:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT2737, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8321, MT8385, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8796, MT8797, MT8798",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 3.3 / RDK-B 22Q3",
"status": "affected"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-20022
2024-03-04 02:43:30
prion
prion
Out-of-bounds
2024-03-04 03:15:00
nvd
nvd
CVE-2024-20022
2024-03-04 03:15:07
cvelist
cvelist
CVE-2024-20022
2024-03-04 02:43:30