VDB

CVE-2024-20064

CVE-2024-20064 PUBLISHED CVSS 8.600000381469727 HIGH

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08572601; Issue ID: MSV-1229.

EPSS 0.09% · 0.6th percentile

Risk Scores

CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.09%
0.6th percentile

Affected Products

VendorProductVersions
mediatekmt6580android_13.0, android_13.0
mediatekmt6762android_13.0, android_13.0
mediatekmt6893android_13.0, android_13.0
mediatekmt6885android_13.0, android_13.0
mediatekmt6985android_13.0, android_13.0
MediaTek, Inc.MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT8678, MT8755, MT8775, MT8792, MT8796Android 13.0, 14.0, Android 13.0, 14.0
mediatekmt6855android_13.0, android_13.0
mediatekmt6891android_13.0, android_13.0
mediatekmt6983android_13.0, android_13.0
mediatekmt6781android_13.0, android_13.0
mediatekmt6877android_13.0, *
mediatekmt6873android_13.0, android_13.0
mediatekmt6789android_13.0, android_13.0
mediatekmt8755android_13.0, *
mediatekmt6989*, android_13.0
mediatekmt8796android_13.0, android_13.0
mediatekmt6883android_13.0, android_13.0
mediatekmt6879android_13.0, android_13.0
mediatekmt6853tandroid_13.0, android_13.0
mediatekmt8792*, android_13.0

…and 10 more

Timeline

  • May 6, 2024 EPSS Score
  • May 6, 2024 CVE Published
  • May 30, 2024 EPSS Score
  • Jun 24, 2024 EPSS Score
  • Jul 19, 2024 EPSS Score
  • Aug 12, 2024 EPSS Score
  • Sep 5, 2024 EPSS Score
  • Sep 29, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 24, 2024 EPSS Score
  • Nov 17, 2024 EPSS Score
  • Dec 12, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›