6.7 Medium

CVE-2024-20031 In da, there is a possible out of bounds write due to lack of valudation

Description

In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742.

Affected products and versions

Product	Affected versions	Fixed in
MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8168, MT8512	Versions not published
mt6739	Versions not published
mt6757	Versions not published
mt6761	Versions not published
mt6763	Versions not published
mt6765	Versions not published
mt6768	Versions not published
mt6771	Versions not published
mt6779	Versions not published

Show the 14 other branches

Product	Affected versions	Fixed in
mt6785	Versions not published
mt6833	Versions not published
mt6853	Versions not published
mt6873	Versions not published
mt6877	Versions not published
mt6885	Versions not published
mt6893	Versions not published
mt8163	Versions not published
mt8167	Versions not published
mt8168	Versions not published
mt8512	Versions not published
Android	14.0	No fix stated
Android	13.0	No fix stated
Android	12.0	No fix stated

References

corp.mediatek.com corp.mediatek.com

Timeline

Published March 4, 2024
Last modified August 16, 2024

The 4 CVEs of MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8168, MT8512 →

CVE-2024-20028 In da, there is a possible out of bounds write due to lack of valudation 6.6 Medium CVE-2024-20027 In da, there is a possible out of bounds write due to improper input validation 7.9 High CVE-2024-20026 In da, there is a possible information disclosure due to improper input validation 4.2 Medium

Track this CVE