6.7
Medium
CVE-2024-20022 In lk, there is a possible escalation of privilege due to a missing bounds check
Description
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2737 | Versions not published | |
| mt6789 | Versions not published | |
| mt6835 | Versions not published | |
| mt6855 | Versions not published | |
| mt6879 | Versions not published | |
| mt6880 | Versions not published | |
| mt6886 | Versions not published | |
| mt6890 | Versions not published | |
| mt6895 | Versions not published |
Show the 22 other branches Hide the 22 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6980 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| mt8321 | Versions not published | |
| mt8385 | Versions not published | |
| mt8666 | Versions not published | |
| mt8667 | Versions not published | |
| mt8673 | Versions not published | |
| mt8765 | Versions not published | |
| mt8766 | Versions not published | |
| mt8768 | Versions not published | |
| mt8781 | Versions not published | |
| mt8786 | Versions not published | |
| mt8788 | Versions not published | |
| mt8789 | Versions not published | |
| mt8791 | Versions not published | |
| mt8796 | Versions not published | |
| mt8797 | Versions not published | |
| mt8798 | Versions not published | |
| MT2737, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8321, MT8385, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8796, MT8797, MT8798 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2737
The 12 CVEs of mt2737 →
CVE-2024-20139
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions
6.5
Medium
CVE-2024-20136
In da, there is a possible out of bounds read due to a missing bounds check
6.2
Medium
CVE-2024-20132
In Modem, there is a possible out of bonds write due to a mission bounds check
6.7
Medium
CVE-2024-20131
In Modem, there is a possible escalation of privilege due to an incorrect bounds check
6.7
Medium