CVE-2024-20032

2024-03-0403:15:07

[email protected]

web.nvd.nist.gov

aee

permission bypass

local privilege escalation

system execution

patch id

issue id

user interaction

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020.

References

corp.mediatek.com/product-security-bulletin/March-2024