4.4
Medium
CVE-2024-20036 In vdec, there is a possible permission bypass due to a permissions bypass
Description
In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6835 | Versions not published | |
| mt6855 | Versions not published | |
| mt6879 | Versions not published | |
| mt6886 | Versions not published | |
| mt6895 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt8792 | Versions not published | |
| mt8796 | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt8798 | Versions not published | |
| MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT8792, MT8796, MT8798 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt6835
The 46 CVEs of mt6835 →
CVE-2024-20134
In ril, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20131
In Modem, there is a possible escalation of privilege due to an incorrect bounds check
6.7
Medium
CVE-2024-20130
In power, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20127
In Telephony, there is a possible out of bounds read due to a missing bounds check
7.5
High