Lucene search

K
cve[email protected]CVE-2024-20024
HistoryMar 04, 2024 - 3:15 a.m.

CVE-2024-20024

2024-03-0403:15:07
web.nvd.nist.gov
40
cve-2024-20024
flashc
out of bounds write
local privilege escalation
security vulnerability
nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.

Affected configurations

Vulners
Node
googleandroidRange<12.0
OR
googleandroidRange<13.0
OR
googleandroidRange<14.0
OR
mediatekmt6781
OR
mediatekmt6789
OR
mediatekmt6833
OR
mediatekmt6835
OR
mediatekmt6879
OR
mediatekmt6886
OR
mediatekmt6895
OR
mediatekmt6983
OR
mediatekmt6985
OR
mediatekmt6989
OR
mediatekmt8666
OR
mediatekmt8666a
OR
mediatekawus036nh
OR
mediatekmt8667
OR
mediatekmt8673
OR
mediatekmt8676
OR
mediatekawus036nh
VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt6781*cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:*
mediatekmt6789*cpe:2.3:h:mediatek:mt6789:*:*:*:*:*:*:*:*
mediatekmt6833*cpe:2.3:h:mediatek:mt6833:*:*:*:*:*:*:*:*
mediatekmt6835*cpe:2.3:h:mediatek:mt6835:*:*:*:*:*:*:*:*
mediatekmt6879*cpe:2.3:h:mediatek:mt6879:*:*:*:*:*:*:*:*
mediatekmt6886*cpe:2.3:h:mediatek:mt6886:*:*:*:*:*:*:*:*
mediatekmt6895*cpe:2.3:h:mediatek:mt6895:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6781, MT6789, MT6833, MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8676, MT8678",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

Related for CVE-2024-20024