7.9
High
CVE-2024-20027 In da, there is a possible out of bounds write due to improper input validation
Description
In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541633.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt8168 | 14.0 | No fix stated |
| mt8168 | 13.0 | No fix stated |
| mt8168 | 12.0 | No fix stated |
| mt8512 | 14.0 | No fix stated |
| mt8512 | 13.0 | No fix stated |
| mt8512 | 12.0 | No fix stated |
| MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8168, MT8512 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt8168
The 32 CVEs of mt8168 →
CVE-2024-20108
In atci, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20021
In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error
6.7
Medium
CVE-2023-32871
In DA, there is a possible permission bypass due to an incorrect status check
5.3
Medium
CVE-2024-20054
In gnss, there is a possible escalation of privilege due to a missing bounds check
6.6
Medium