VDB

CVE-2024-20136

CVE-2024-20136 PUBLISHED CVSS 6.199999809265137 MEDIUM

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.

EPSS 0.09% · 0.4th percentile

Risk Scores

CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.09%
0.4th percentile

Affected Products

VendorProductVersions
mediatekmt86780
mediatekmt69850
mediatekmt86730
mediatekmt87960
mediatekmt68970
openwrtopenwrt19.07.0, 21.02.0, 23.05
mediatekmt83700
mediatekmt8795t0
mediatekmt68800
mediatekmt68790
mediatekmt88930
mediatekmt81950
mediatekmt67890
mediatekmt68860
mediatekmt68900
mediatekmt69800
mediatekmt67810
googleandroid13.0, 15.0, 12.0
MediaTek, Inc.MT2737, MT6781, MT6789, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8195, MT8370, MT8390, MT8673, MT8676, MT8678, MT8755, MT8775, MT8781, MT8795T, MT8796, MT8798, MT8893*
mediatekmt68950

…and 13 more

Timeline

  • Dec 2, 2024 EPSS Score
  • Dec 2, 2024 CVE Published
  • Dec 2, 2024 PoC Published
  • Dec 2, 2024 CVE Updated
  • Dec 19, 2024 EPSS Score
  • Jan 5, 2025 EPSS Score
  • Jan 22, 2025 EPSS Score
  • Jan 23, 2025 Coalition ESS Score
  • Feb 8, 2025 EPSS Score
  • Feb 25, 2025 EPSS Score
  • Mar 14, 2025 EPSS Score
  • Mar 31, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›