Lucene search

K
cvelistMediaTekCVELIST:CVE-2024-20045
HistoryApr 01, 2024 - 2:35 a.m.

CVE-2024-20045

2024-04-0102:35:04
MediaTek
www.cve.org
audio
out of bounds read
buffer size
local information disclosure
system execution privileges
exploitation
patch id
alps08024748
issue id
alps08029526

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08024748; Issue ID: ALPS08029526.

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6983, MT6985, MT6989, MT8167, MT8167S, MT8168, MT8188, MT8195, MT8321, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797, MT8798",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-20045