4.4 Medium

CVE-2024-20097 In vdec, there is a possible out of bounds read due to a missing bounds check

Description

In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1630.

Affected products and versions

Product	Affected versions	Fixed in
MT6761, MT6765, MT6768, MT6785, MT6789, MT6853, MT6873, MT6885, MT8666, MT8667, MT8673, MT8675, MT8678	Versions not published

Do you use MT6761, MT6765, MT6768, MT6785, MT6789, MT6853, MT6873, MT6885, MT8666, MT8667, MT8673, MT8675, MT8678?

Track this CVE Watch MT6761, MT6765, MT6768, MT6785, MT6789, MT6853, MT6873, MT6885, MT8666, MT8667, MT8673, MT8675, MT8678 Check my SBOMs

www.cveye.io/en/cve/CVE-2024-20097

Timeline

Published October 7, 2024
Last modified October 27, 2024

References

corp.mediatek.com corp.mediatek.com

Track this CVE