Lucene search

MediaTekVULNRICHMENT:CVE-2024-20021

HistoryMay 06, 2024 - 2:52 a.m.

CVE-2024-20021

2024-05-0602:52:01

CWE-269

MediaTek

github.com

atf

spm

logic error

local privilege escalation

memory remapping

patch alps08584568

issue msv-1249

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6853",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6873",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6885",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6893",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8168",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8183",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8188",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8188t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8188t",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8195",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8195z:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8195z",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8362a",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8365",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8666",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8667",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8675",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8765",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8766",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8766z:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8766z",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768a:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768a",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768b:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768b",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768z:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768z",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8781",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8788",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8788t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8788t",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8788z:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8788z",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8792",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8795t",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8798",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mediatek:mt6768:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6768",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6781",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6785",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6833",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt6877",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8321",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8666a:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8666a",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "git",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8673",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8768t:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8768t",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8786",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8788x:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8788x",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mediatek",
    "product": "mt8796",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0",
        "versionType": "custom",
        "lessThanOrEqual": "Android 14.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

corp.mediatek.com/product-security-bulletin/May-2024