VDB
CVE-2024-20081
CVE-2024-20081
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412.
EPSS 0.22% · 12.5th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.22%
12.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openwrt | openwrt | 21.02.0, 22.03.5, 21.02.0 |
| mediatek | mt6789 | -, - |
| mediatek | mt8667 | -, - |
| mediatek | mt6785 | -, - |
| mediatek | mt6989 | -, - |
| mediatek | mt6889 | -, * |
| mediatek | mt8666 | -, - |
| mediatek | mt8673 | *, - |
| mediatek | mt6883 | -, * |
| mediatek | mt6761 | -, - |
| mediatek | mt6895 | -, * |
| mediatek | mt6853t | -, - |
| mediatek | mt6875 | -, - |
| mediatek | mt6855 | -, - |
| mediatek | mt6990 | -, - |
| linuxfoundation | yocto | 3.3, 4.0, 3.3 |
| MediaTek, Inc. | MT2735, MT2737, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8666, MT8667, MT8673, MT8676, MT8678 | *, Android 13.0, 14.0 / openWRT 19.07, 21.02, 23.05 / Yocto 2.6, 3.3, 4.0 / RDK-B 22Q3 |
| mediatek | mt6781 | -, - |
| mediatek | mt6886 | -, - |
| mediatek | mt6890 | -, - |
…and 21 more
Timeline
- Jul 1, 2024 EPSS Score
- Jul 1, 2024 CVE Published
- Jul 24, 2024 EPSS Score
- Aug 15, 2024 EPSS Score
- Sep 7, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 22, 2024 EPSS Score
- Nov 13, 2024 EPSS Score
- Dec 7, 2024 EPSS Score
- Dec 29, 2024 EPSS Score
- Jan 21, 2025 EPSS Score