VDB
CVE-2024-20079
CVE-2024-20079
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: MSV-1491.
EPSS 0.17% · 7.0th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.17%
7.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT8666, MT8667, MT8673, MT8676, MT8678 | Android 13.0, 14.0, Android 13.0, 14.0 |
| android | 13.0, 14.0, 13.0 |
Timeline
- Jul 1, 2024 EPSS Score
- Jul 1, 2024 CVE Published
- Jul 23, 2024 EPSS Score
- Aug 15, 2024 EPSS Score
- Sep 6, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 21, 2024 EPSS Score
- Nov 13, 2024 EPSS Score
- Dec 6, 2024 EPSS Score
- Dec 29, 2024 EPSS Score
- Jan 20, 2025 EPSS Score