9.8
Critical
CVE-2024-20080 In gnss service, there is a possible escalation of privilege due to improper certificate validation
Description
In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2735 | Versions not published | |
| mt2737 | Versions not published | |
| mt6761 | Versions not published | |
| mt6765 | Versions not published | |
| mt6768 | Versions not published | |
| mt6781 | Versions not published | |
| mt6785 | Versions not published | |
| mt6789 | Versions not published | |
| mt6833 | Versions not published |
Show the 28 other branches Hide the 28 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6853 | Versions not published | |
| mt6853t | Versions not published | |
| mt6855 | Versions not published | |
| mt6873 | Versions not published | |
| mt6875 | Versions not published | |
| mt6877 | Versions not published | |
| mt6879 | Versions not published | |
| mt6880 | Versions not published | |
| mt6883 | Versions not published | |
| mt6885 | Versions not published | |
| mt6886 | Versions not published | |
| mt6889 | Versions not published | |
| mt6890 | Versions not published | |
| mt6891 | Versions not published | |
| mt6893 | Versions not published | |
| mt6895 | Versions not published | |
| mt6980 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| mt8666 | Versions not published | |
| mt8667 | Versions not published | |
| mt8673 | Versions not published | |
| mt8676 | Versions not published | |
| mt8678 | Versions not published | |
| Android | 14.0 | No fix stated |
| MT2735, MT2737, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8666, MT8... | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2735
The 13 CVEs of mt2735 →
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check
7.5
High
CVE-2024-20082
In Modem, there is a possible memory corruption due to a missing bounds check
9.8
Critical
CVE-2024-20081
In gnss service, there is a possible out of bounds write due to improper input validation
9.8
Critical
CVE-2024-20003
In Modem NL1, there is a possible system crash due to an improper input validation
7.5
High