CVE-2024-20088

2024-09-0202:07:36

CWE-125

MediaTek

github.com

keyinstall

out of bounds read

local information disclosure

system execution privileges

patch alps08932099

issue msv-1543

AI Score

6.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08932099; Issue ID: MSV-1543.