CVE-2024-20143

🗓️ 06 Jan 2025 03:17:44Reported by MediaTekType

Possible out of bounds write in V6 DA may allow local privilege escalation with user interaction.

Reporter	Title	Published	Views	Family All 13
Android Security Bulletins	Android Security Bulletin-January 2025Stay organized with collectionsSave and categorize content based on your preferences.	6 Jan 202500:00	–	androidsecurity
Circl	CVE-2024-20143	6 Jan 202503:29	–	circl
CNNVD	MediaTek Chipsets 安全漏洞	6 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-20143	6 Jan 202503:17	–	cvelist
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	7 Jan 202512:54	–	ncsc
NVD	CVE-2024-20143	6 Jan 202504:15	–	nvd
OSV	ASB-A-376814208	1 Jan 202500:00	–	osv
OSV	ASB-A-376816309	1 Jan 202500:00	–	osv
OSV	CVE-2024-20143	6 Jan 202504:15	–	osv
OSV	CVE-2024-20144	6 Jan 202504:15	–	osv

NVD

Vulners

Node

linuxfoundation yoctoMatch4.0

rdkcentral rdk-bMatch2022q3

rdkcentral rdk-bMatch2024q1

google androidMatch12.0

google androidMatch13.0

google androidMatch14.0

google androidMatch15.0

openwrt openwrtMatch19.07.0-

openwrt openwrtMatch21.02.0-

openwrt openwrtMatch23.05

AND

mediatek mt2737Match-

mediatek mt6781Match-

mediatek mt6789Match-

mediatek mt6835Match-

mediatek mt6855Match-

mediatek mt6878Match-

mediatek mt6879Match-

mediatek mt6880Match-

mediatek mt6886Match-

mediatek mt6890Match-

mediatek mt6895Match-

mediatek mt6897Match-

mediatek mt6980Match-

mediatek mt6983Match-

mediatek mt6985Match-

mediatek mt6989Match-

mediatek mt6990Match-

mediatek mt8370Match-

mediatek mt8390Match-

mediatek mt8676Match-

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/January-2025

22 Apr 2025 13:49Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.6

EPSS0.00044

SSVC

CWE-787