VDB
CVE-2024-20054
CVE-2024-20054
PUBLISHED
CVSS 6.599999904632568 MEDIUM
In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.
EPSS 0.27% · 19.3th percentile
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.27%
19.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mt6833 | android_13.0, android_13.0 |
| mediatek | mt8788 | android_13.0, android_13.0 |
| mediatek | mt6761 | android_13.0, android_13.0 |
| mediatek | mt8766 | android_13.0, android_13.0 |
| rdkcentral | rdk-b | 2022q3, * |
| mediatek | mt8789 | android_13.0, android_13.0 |
| mediatek | mt8188 | android_13.0, android_13.0 |
| mediatek | mt8797 | android_13.0, android_13.0 |
| android | 13.0, 14.0, 13.0 | |
| mediatek | mt8167 | android_13.0, android_13.0 |
| mediatek | mt8768 | android_13.0, * |
| mediatek | mt8765 | android_13.0, android_13.0 |
| openwrt | openwrt | 21.02.0, 21.02.0, 19.07.0 |
| mediatek | mt6768 | android_13.0, android_13.0 |
| mediatek | mt6855 | android_13.0, android_13.0 |
| mediatek | mt6765 | android_13.0, android_13.0 |
| linuxfoundation | yocto | 2.6, 3.3, 2.6 |
| mediatek | mt6895 | android_13.0, android_13.0 |
| mediatek | mt8781 | android_13.0, android_13.0 |
| MediaTek, Inc. | MT2735, MT2737, MT6762, MT6765, MT6769, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT8168, MT8173, MT8195, MT8321, MT8385, MT8390, MT8666, MT8667, MT8673, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8791T, MT8792, MT8796, MT8893 | Android 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 2.6, 3.3 / RDKB 2022Q3, Android 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 2.6, 3.3 / RDKB 2022Q3 |
…and 6 more
Timeline
- Apr 1, 2024 EPSS Score
- Apr 1, 2024 CVE Published
- Apr 27, 2024 EPSS Score
- May 22, 2024 EPSS Score
- Jun 18, 2024 EPSS Score
- Jul 3, 2024 CVE Updated
- Jul 14, 2024 EPSS Score
- Aug 8, 2024 EPSS Score
- Sep 3, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 25, 2024 EPSS Score