VDB
CVE-2024-20034
CVE-2024-20034
PUBLISHED
CVSS 7.199999809265137 HIGH
In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08488849; Issue ID: ALPS08488849.
EPSS 0.30% · 23.1th percentile
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.30%
23.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mt8321 | -, - |
| mediatek | mt6895 | -, - |
| mediatek | mt8789 | -, - |
| mediatek | mt6761 | -, - |
| MediaTek, Inc. | MT6761, MT6765, MT6768, MT6855, MT6895, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 | Android 12.0, 13.0, 14.0, Android 12.0, 13.0, 14.0 |
| mediatek | mt6768 | -, - |
| mediatek | mt8766 | -, - |
| mediatek | mt8788 | -, - |
| mediatek | mt8791t | -, - |
| mediatek | mt8786 | -, - |
| mediatek | mt8768 | -, - |
| mediatek | mt8188 | -, - |
| mediatek | mt6765 | -, - |
| mediatek | mt8765 | -, - |
| mediatek | mt6855 | *, - |
| mediatek | mt8167 | -, - |
| mediatek | mt8781 | -, - |
| mediatek | mt8797 | -, - |
| mediatek | mt8798 | -, - |
| mediatek | mt8168 | -, - |
…and 1 more
Timeline
- Mar 4, 2024 EPSS Score
- Mar 4, 2024 CVE Published
- Mar 4, 2024 PoC Published
- Mar 31, 2024 EPSS Score
- Apr 26, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 19, 2024 EPSS Score
- Jul 3, 2024 CVE Updated
- Jul 15, 2024 EPSS Score
- Aug 11, 2024 EPSS Score
- Sep 7, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score