VDB

CVE-2024-20046

CVE-2024-20046 PUBLISHED CVSS 8.600000381469727 HIGH

In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08485622; Issue ID: ALPS08485622.

EPSS 0.27% · 19.3th percentile

Risk Scores

CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.27%
19.3th percentile

Affected Products

VendorProductVersions
mediatekmt8768android_12.0, android_12.0
mediatekmt8798android_12.0, android_12.0
mediatekmt8789android_12.0, *
mediatekmt6765android_12.0, android_12.0
mediatekmt6895android_12.0, android_12.0
mediatekmt8797android_12.0, android_12.0
mediatekmt6768android_12.0, android_12.0
mediatekmt8321android_12.0, android_12.0
mediatekmt8786android_12.0, android_12.0
mediatekmt6761android_12.0, *
MediaTek, Inc.MT6761, MT6765, MT6768, MT6789, MT6833, MT6855, MT6895, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798Android 12.0, Android 12.0
googleandroid12.0, 12.0
mediatekmt6789android_12.0, android_12.0
mediatekmt8765android_12.0, android_12.0
mediatekmt8188android_12.0, android_12.0
mediatekmt6855android_12.0, android_12.0
mediatekmt8766android_12.0, android_12.0
mediatekmt8791tandroid_12.0, android_12.0
mediatekmt6833android_12.0, android_12.0
mediatekmt8788android_12.0, android_12.0

…and 3 more

Timeline

  • Apr 1, 2024 EPSS Score
  • Apr 1, 2024 CVE Published
  • Apr 27, 2024 EPSS Score
  • May 22, 2024 EPSS Score
  • Jun 18, 2024 EPSS Score
  • Jul 3, 2024 CVE Updated
  • Jul 14, 2024 EPSS Score
  • Aug 8, 2024 EPSS Score
  • Sep 3, 2024 EPSS Score
  • Sep 29, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 25, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›