CVE-2024-20065

2024-06-0302:15:08

CWE-284

[email protected]

web.nvd.nist.gov

telephony

information disclosure

permission check

local

patch id

issue id

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08698617; Issue ID: MSV-1394.

References

corp.mediatek.com/product-security-bulletin/June-2024