VDB
CVE-2024-20021
CVE-2024-20021
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.
EPSS 0.11% · 1.5th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
1.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mt8768b | Android 12.0, Android 12.0 |
| mediatek | mt8786 | Android 12.0, Android 12.0 |
| MediaTek, Inc. | MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798 | Android 12.0, 13.0, 14.0, * |
| mediatek | mt8195 | Android 12.0, Android 12.0 |
| mediatek | mt8188 | Android 12.0, Android 12.0 |
| mediatek | mt6781 | Android 12.0, Android 12.0 |
| mediatek | mt8768 | Android 12.0, Android 12.0 |
| mediatek | mt8675 | Android 12.0, Android 12.0 |
| mediatek | mt6885 | Android 12.0, * |
| mediatek | mt8768t | Android 12.0, Android 12.0 |
| mediatek | mt8195z | Android 12.0, Android 12.0 |
| mediatek | mt8768a | Android 12.0, Android 12.0 |
| mediatek | mt8788t | Android 12.0, Android 12.0 |
| mediatek | mt8666a | Android 12.0, * |
| mediatek | mt8788x | Android 12.0, * |
| mediatek | mt8788 | Android 12.0, Android 12.0 |
| mediatek | mt6893 | Android 12.0, Android 12.0 |
| mediatek | mt8365 | *, Android 12.0 |
| mediatek | mt8796 | Android 12.0, Android 12.0 |
| mediatek | mt6833 | Android 12.0, Android 12.0 |
…and 23 more
Timeline
- May 6, 2024 EPSS Score
- May 6, 2024 CVE Published
- May 30, 2024 EPSS Score
- Jun 24, 2024 EPSS Score
- Jul 19, 2024 EPSS Score
- Aug 12, 2024 EPSS Score
- Sep 5, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 16, 2024 PoC Published
- Oct 19, 2024 PoC Published
- Oct 24, 2024 EPSS Score