VDB

CVE-2024-20058

CVE-2024-20058 PUBLISHED CVSS 6.900000095367432 MEDIUM

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204.

EPSS 0.11% · 1.2th percentile

Risk Scores

CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.11%
1.2th percentile

Affected Products

VendorProductVersions
mediatekmt8792Android 12.0, Android 12.0
mediatekmt8771Android 12.0, Android 12.0
mediatekmt6853Android 12.0, Android 12.0
mediatekmt6983*, Android 12.0
mediatekmt8786Android 12.0, Android 12.0
mediatekmt8321Android 12.0, *
MediaTek, Inc.MT6765, MT6768, MT6785, MT6833, MT6853, MT6855, MT6893, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798*, Android 12.0, 13.0, 14.0
mediatekmt8755Android 12.0, Android 12.0
mediatekmt8797Android 12.0, *
mediatekmt8768Android 12.0, Android 12.0
mediatekmt8766Android 12.0, Android 12.0
mediatekmt6833Android 12.0, Android 12.0
mediatekmt8385Android 12.0, Android 12.0
mediatekmt8789Android 12.0, Android 12.0
mediatekmt6765Android 12.0, Android 12.0
mediatekmt6893Android 12.0, Android 12.0
mediatekmt8795tAndroid 12.0, Android 12.0
mediatekmt8788*, Android 12.0
mediatekmt8798Android 12.0, *
googleandroid12.0, 13.0, 14.0

…and 7 more

Timeline

  • May 6, 2024 EPSS Score
  • May 6, 2024 CVE Published
  • May 30, 2024 EPSS Score
  • Jun 24, 2024 EPSS Score
  • Jul 19, 2024 EPSS Score
  • Aug 12, 2024 EPSS Score
  • Sep 5, 2024 EPSS Score
  • Sep 29, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 24, 2024 EPSS Score
  • Nov 17, 2024 EPSS Score
  • Dec 12, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›