CVE-2024-20109

MediaTek Chipsets are affected by an out-of-bounds write vulnerability in the ccu component caused by a missing bounds check. This flaw allows for local escalation of privilege , requiring System execution privileges for exploitation without requiring user interaction. Remediation is addressed vi...

Out-of-bounds

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

chromium-browser: Lack of meaningful user interaction requirement before file upload

Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page...