6.7 Moyenne

CVE-2024-20012 In keyInstall, there is a possible escalation of privilege due to type confusion

Description

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...	Versions non publiées

Les 18 CVE de MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... →

CVE-2024-20013 In keyInstall, there is a possible out of bounds write due to a missing bounds check 6.7 Moyenne CVE-2024-20010 In keyInstall, there is a possible escalation of privilege due to type confusion 6.7 Moyenne CVE-2023-32876 In keyInstall, there is a possible information disclosure due to a missing bounds check 4.4 Moyenne CVE-2023-32875 In keyInstall, there is a possible information disclosure due to a missing bounds check 4.4 Moyenne

Vous utilisez MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... ?

Suivre cette CVE Surveiller MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2024-20012

Chronologie

Publiée 5 février 2024
Dernière modification 9 mai 2025

Références

corp.mediatek.com corp.mediatek.com

Suivre cette CVE

CVE-2024-20012 In keyInstall, there is a possible escalation of privilege due to type confusion

Description

Produits et versions touchés

Autres CVE de MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...