CVE-2024-20055

2024-04-0103:15:08

[email protected]

web.nvd.nist.gov

imgsys

information disclosure

missing bounds check

local info disclosure

system execution privileges

user interaction

patch id

issue id

alps08518692

msv-1012

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.

References

corp.mediatek.com/product-security-bulletin/April-2024