6.7 Medium

CVE-2024-20120 In KeyInstall, there is a possible out of bounds write due to a missing bounds check

Description

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1575.

Affected products and versions

Product	Affected versions	Fixed in
MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798	Versions not published
mt6765	Versions not published
mt6768	Versions not published
mt6833	Versions not published
mt6835	Versions not published
mt6853	Versions not published
mt6855	Versions not published
mt6879	Versions not published
mt6886	Versions not published

Show the 24 other branches

Product	Affected versions	Fixed in
mt6893	Versions not published
mt6983	Versions not published
mt8321	Versions not published
mt8385	Versions not published
mt8755	Versions not published
mt8765	Versions not published
mt8766	Versions not published
mt8768	Versions not published
mt8771	Versions not published
mt8775	Versions not published
mt8781	Versions not published
mt8786	Versions not published
mt8788	Versions not published
mt8789	Versions not published
mt8791t	Versions not published
mt8792	Versions not published
mt8795t	Versions not published
mt8796	Versions not published
mt8797	Versions not published
mt8798	Versions not published
Android	15.0	No fix stated
Android	14.0	No fix stated
Android	13.0	No fix stated
Android	12.0	No fix stated

References

corp.mediatek.com corp.mediatek.com

Timeline

Published November 4, 2024
Last modified November 4, 2024

Track this CVE