Lucene search

K
cve[email protected]CVE-2024-20054
HistoryApr 01, 2024 - 3:15 a.m.

CVE-2024-20054

2024-04-0103:15:08
web.nvd.nist.gov
29
cve
escalation of privilege
local execution
bounds check
patch id
issue id
nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.

Affected configurations

Vulners
Node
googleandroidRange<13.0
OR
googleandroidRange<14.0
OR
mediatekmt2735
OR
mediatekmt2737
OR
mediatekmt6762
OR
mediatekmt6765
OR
mediatekmt6769
OR
mediatekmt6833
OR
mediatekmt6835
OR
mediatekmt6853
OR
mediatekmt6855
OR
mediatekmt6873
OR
mediatekmt6875
OR
mediatekmt6877
OR
mediatekmt6879
OR
mediatekmt6883
OR
mediatekmt6885
OR
mediatekmt6889
OR
mediatekmt6890
OR
mediatekmt6891
OR
mediatekmt6893
OR
mediatekmt6895
OR
mediatekmt6983
OR
mediatekmt6985
OR
mediatekmt6989
OR
mediatekmt6990
OR
mediatekmt8168
OR
mediatekmt8173
OR
mediatekmt8195
OR
mediatekmt8321
OR
mediatekmt8385
OR
mediatekmt8390
OR
mediatekmt8666
OR
mediatekmt8667
OR
mediatekmt8673
OR
mediatekmt8676
OR
mediatekawus036nh
OR
mediatekmt8755
OR
mediatekmt8765
OR
mediatekmt8766
OR
mediatekmt8768
OR
mediatekmt8775
OR
mediatekmt8781
OR
mediatekmt8786
OR
mediatekmt8788
OR
mediatekmt8791t
OR
mediatekmt8792
OR
mediatekmt8796
OR
mediatekawus036nh
VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt2735*cpe:2.3:h:mediatek:mt2735:*:*:*:*:*:*:*:*
mediatekmt2737*cpe:2.3:h:mediatek:mt2737:*:*:*:*:*:*:*:*
mediatekmt6762*cpe:2.3:h:mediatek:mt6762:*:*:*:*:*:*:*:*
mediatekmt6765*cpe:2.3:h:mediatek:mt6765:*:*:*:*:*:*:*:*
mediatekmt6769*cpe:2.3:h:mediatek:mt6769:*:*:*:*:*:*:*:*
mediatekmt6833*cpe:2.3:h:mediatek:mt6833:*:*:*:*:*:*:*:*
mediatekmt6835*cpe:2.3:h:mediatek:mt6835:*:*:*:*:*:*:*:*
mediatekmt6853*cpe:2.3:h:mediatek:mt6853:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 491

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2735, MT2737, MT6762, MT6765, MT6769, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT8168, MT8173, MT8195, MT8321, MT8385, MT8390, MT8666, MT8667, MT8673, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8791T, MT8792, MT8796, MT8893",
    "versions": [
      {
        "version": "Android 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 2.6, 3.3 / RDKB 2022Q3",
        "status": "affected"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

Related for CVE-2024-20054