Lucene search

K
cve[email protected]CVE-2024-20041
HistoryApr 01, 2024 - 3:15 a.m.

CVE-2024-20041

2024-04-0103:15:07
web.nvd.nist.gov
32
bounds check missing
local information disclosure
system execution.

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541746; Issue ID: ALPS08541746.

Affected configurations

Vulners
Node
googleandroidRange<12.0
OR
googleandroidRange<13.0
OR
googleandroidRange<14.0
OR
mediatekmt2713
OR
mediatekmt6781
OR
mediatekmt6789
OR
mediatekmt6835
OR
mediatekmt6855
OR
mediatekmt6879
OR
mediatekmt6886
OR
mediatekmt6895
OR
mediatekmt6983
OR
mediatekmt6985
OR
mediatekmt6989
OR
mediatekmt8188
OR
mediatekmt8673
OR
mediatekmt8676
OR
mediatekmt8781
VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt2713*cpe:2.3:h:mediatek:mt2713:*:*:*:*:*:*:*:*
mediatekmt6781*cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:*
mediatekmt6789*cpe:2.3:h:mediatek:mt6789:*:*:*:*:*:*:*:*
mediatekmt6835*cpe:2.3:h:mediatek:mt6835:*:*:*:*:*:*:*:*
mediatekmt6855*cpe:2.3:h:mediatek:mt6855:*:*:*:*:*:*:*:*
mediatekmt6879*cpe:2.3:h:mediatek:mt6879:*:*:*:*:*:*:*:*
mediatekmt6886*cpe:2.3:h:mediatek:mt6886:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8188, MT8673, MT8676, MT8781",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-20041