CVE-2024-20033 | Vulnetix

CVE-2024-20033 PUBLISHED CVSS 6.900000095367432 MEDIUM

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.

EPSS 0.09% · 0.4th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.09%

0.4th percentile

Affected Products

Vendor	Product	Versions
google	android	12.0, 14.0, 13.0
MediaTek, Inc.	MT2713, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789, MT6835, MT6855, MT6879, MT6883, MT6885, MT6886, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8792, MT8796, MT8797, MT8798	*, Android 12.0, 13.0, 14.0

Timeline

Mar 4, 2024 EPSS Score
Mar 4, 2024 CVE Published
Mar 4, 2024 PoC Published
Mar 30, 2024 EPSS Score
Apr 26, 2024 EPSS Score
May 22, 2024 EPSS Score
Jun 19, 2024 EPSS Score
Jul 15, 2024 EPSS Score
Aug 10, 2024 EPSS Score
Sep 6, 2024 EPSS Score
Oct 2, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score

References

Open in Interactive Console →