Lucene search

K
cve[email protected]CVE-2024-20028
HistoryMar 04, 2024 - 3:15 a.m.

CVE-2024-20028

2024-03-0403:15:07
web.nvd.nist.gov
27
cve-2024-20028
local privilege escalation
out of bounds write
valudation
alps08541632
alps08541687
nvd

6.9 Medium

AI Score

Confidence

High

In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.

CPE configuration

Vulners
googleandroidRange<12.0
OR
googleandroidRange<13.0
OR
googleandroidRange<14.0
OR
mediatekmt6739
OR
mediatekmt6757
OR
mediatekmt6761
OR
mediatekmt6763
OR
mediatekmt6765
OR
mediatekmt6768
OR
mediatekmt6771
OR
mediatekmt6779
OR
mediatekmt6785
OR
mediatekmt6833
OR
mediatekmt6853
OR
mediatekmt6873
OR
mediatekmt6877
OR
mediatekmt6885
OR
mediatekmt6893
OR
mediatekmt8163
OR
mediatekmt8167
OR
mediatekmt8168
OR
mediatekawus036nh
VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt6739*cpe:2.3:h:mediatek:mt6739:*:*:*:*:*:*:*:*
mediatekmt6757*cpe:2.3:h:mediatek:mt6757:*:*:*:*:*:*:*:*
mediatekmt6761*cpe:2.3:h:mediatek:mt6761:*:*:*:*:*:*:*:*
mediatekmt6763*cpe:2.3:h:mediatek:mt6763:*:*:*:*:*:*:*:*
mediatekmt6765*cpe:2.3:h:mediatek:mt6765:*:*:*:*:*:*:*:*
mediatekmt6768*cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:*
mediatekmt6771*cpe:2.3:h:mediatek:mt6771:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8168, MT8512",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

High

Related for CVE-2024-20028