Lucene search
HistoryMar 04, 2024 - 3:15 a.m.
CVE-2024-20027
cve-2024-20027
out of bounds write
local privilege escalation
improper input validation
system execution privileges
In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541633.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt6739
ORmediatekmt6757
ORmediatekmt6761
ORmediatekmt6763
ORmediatekmt6765
ORmediatekmt6768
ORmediatekmt6771
ORmediatekmt6779
ORmediatekmt6785
ORmediatekmt6833
ORmediatekmt6853
ORmediatekmt6873
ORmediatekmt6877
ORmediatekmt6885
ORmediatekmt6893
ORmediatekmt8163
ORmediatekmt8167
ORmediatekmt8168
ORmediatekawus036nh
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt6739 | * | cpe:2.3:h:mediatek:mt6739:*:*:*:*:*:*:*:* |
| mediatek | mt6757 | * | cpe:2.3:h:mediatek:mt6757:*:*:*:*:*:*:*:* |
| mediatek | mt6761 | * | cpe:2.3:h:mediatek:mt6761:*:*:*:*:*:*:*:* |
| mediatek | mt6763 | * | cpe:2.3:h:mediatek:mt6763:*:*:*:*:*:*:*:* |
| mediatek | mt6765 | * | cpe:2.3:h:mediatek:mt6765:*:*:*:*:*:*:*:* |
| mediatek | mt6768 | * | cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:* |
| mediatek | mt6771 | * | cpe:2.3:h:mediatek:mt6771:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8168, MT8512",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0",
"status": "affected"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2024-03-04 03:15:00
cvelist
cvelist
CVE-2024-20027
2024-03-04 02:43:38
nvd
nvd
CVE-2024-20027
2024-03-04 03:15:07