Skip to content
Sign in
6.7 Medium

CVE-2024-20010 In keyInstall, there is a possible escalation of privilege due to type confusion

Description

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358560; Issue ID: ALPS08358560.

Affected products and versions

Product Affected versions Fixed in
MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... Versions not published

Other CVEs of MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...

The 18 CVEs of MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... →
CVE-2024-20013 In keyInstall, there is a possible out of bounds write due to a missing bounds check 6.7 Medium CVE-2024-20012 In keyInstall, there is a possible escalation of privilege due to type confusion 6.7 Medium CVE-2023-32876 In keyInstall, there is a possible information disclosure due to a missing bounds check 4.4 Medium CVE-2023-32875 In keyInstall, there is a possible information disclosure due to a missing bounds check 4.4 Medium
Track this CVE