6.7
Medium
CVE-2024-20021 In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error
Description
In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6853 | Versions not published | |
| mt6873 | Versions not published | |
| mt6885 | Versions not published | |
| mt6893 | Versions not published | |
| mt8168 | Versions not published | |
| mt8183 | Versions not published | |
| mt8188 | Versions not published | |
| mt8188t | Versions not published | |
| mt8195 | Versions not published |
Show the 33 other branches Hide the 33 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt8195z | Versions not published | |
| mt8362a | Versions not published | |
| mt8365 | Versions not published | |
| mt8666 | Versions not published | |
| mt8667 | Versions not published | |
| mt8675 | Versions not published | |
| mt8765 | Versions not published | |
| mt8766 | Versions not published | |
| mt8766z | Versions not published | |
| mt8768a | Versions not published | |
| mt8768b | Versions not published | |
| mt8768z | Versions not published | |
| mt8781 | Versions not published | |
| mt8788 | Versions not published | |
| mt8788t | Versions not published | |
| mt8788z | Versions not published | |
| mt8792 | Versions not published | |
| mt8795t | Versions not published | |
| mt8798 | Versions not published | |
| mt6768 | Versions not published | |
| mt6781 | Versions not published | |
| mt6785 | Versions not published | |
| mt6833 | Versions not published | |
| mt6877 | Versions not published | |
| mt8321 | Versions not published | |
| mt8666a | Versions not published | |
| mt8673 | Versions not published | |
| mt8768 | Versions not published | |
| mt8768t | Versions not published | |
| mt8786 | Versions not published | |
| mt8788x | Versions not published | |
| mt8796 | Versions not published | |
| MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z... | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt6853
The 74 CVEs of mt6853 →
CVE-2024-20135
In soundtrigger, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20130
In power, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20127
In Telephony, there is a possible out of bounds read due to a missing bounds check
7.5
High
CVE-2024-20128
In Telephony, there is a possible out of bounds read due to a missing bounds check
7.5
High