6.6

CVE-2024-20028

EPSS 0.27%
Veröffentlicht 04.03.2024 03:15:07
Zuletzt bearbeitet 22.04.2025 20:37:08
Erkennungen
Login

In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 18

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 12.0

   Mediatek ≫ Mt6739 Version -
   Mediatek ≫ Mt6757 Version -
   Mediatek ≫ Mt6761 Version -
   Mediatek ≫ Mt6763 Version -
   Mediatek ≫ Mt6765 Version -
   Mediatek ≫ Mt6768 Version -
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt6785 Version -
   Mediatek ≫ Mt6833 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6893 Version -
   Mediatek ≫ Mt8163 Version -
   Mediatek ≫ Mt8167 Version -
   Mediatek ≫ Mt8168 Version -
   Mediatek ≫ Mt8512 Version -

Google ≫ Android Version 13.0

   Mediatek ≫ Mt6739 Version -
   Mediatek ≫ Mt6757 Version -
   Mediatek ≫ Mt6761 Version -
   Mediatek ≫ Mt6763 Version -
   Mediatek ≫ Mt6765 Version -
   Mediatek ≫ Mt6768 Version -
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt6785 Version -
   Mediatek ≫ Mt6833 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6893 Version -
   Mediatek ≫ Mt8163 Version -
   Mediatek ≫ Mt8167 Version -
   Mediatek ≫ Mt8168 Version -
   Mediatek ≫ Mt8512 Version -

Google ≫ Android Version 14.0

   Mediatek ≫ Mt6739 Version -
   Mediatek ≫ Mt6757 Version -
   Mediatek ≫ Mt6761 Version -
   Mediatek ≫ Mt6763 Version -
   Mediatek ≫ Mt6765 Version -
   Mediatek ≫ Mt6768 Version -
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt6785 Version -
   Mediatek ≫ Mt6833 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6893 Version -
   Mediatek ≫ Mt8163 Version -
   Mediatek ≫ Mt8167 Version -
   Mediatek ≫ Mt8168 Version -
   Mediatek ≫ Mt8512 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.188

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.6	0.7	5.9	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/March-2024

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20028

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20028

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20028

EUVD