CVE-2024-20038 | Vulnetix

CVE-2024-20038 PUBLISHED CVSS 6.900000095367432 MEDIUM

In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495932; Issue ID: ALPS08495932.

EPSS 0.10% · 1.0th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.10%

1.0th percentile

Affected Products

Vendor	Product	Versions
google	android	12.0, 13.0, 14.0
MediaTek, Inc.	MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6983, MT6985, MT6989, MT8168, MT8188, MT8195, MT8673, MT8675	Android 12.0, 13.0, 14.0, Android 12.0, 13.0, 14.0

Timeline

Mar 4, 2024 EPSS Score
Mar 4, 2024 CVE Published
Mar 30, 2024 EPSS Score
Apr 26, 2024 EPSS Score
May 22, 2024 EPSS Score
Jun 19, 2024 EPSS Score
Jul 15, 2024 EPSS Score
Aug 10, 2024 EPSS Score
Sep 6, 2024 EPSS Score
Oct 2, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Oct 29, 2024 EPSS Score

References

Open in Interactive Console →