CVE-2024-20078

EPSS 0.26%
Veröffentlicht 01.07.2024 05:15:04
Zuletzt bearbeitet 28.05.2025 20:12:17
Erkennungen
Login

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08737250; Issue ID: MSV-1452.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 21

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 12.0

   Mediatek ≫ Mt6768 Version -
   Mediatek ≫ Mt6779 Version -
   Mediatek ≫ Mt8321 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8755 Version -
   Mediatek ≫ Mt8765 Version -
   Mediatek ≫ Mt8766 Version -
   Mediatek ≫ Mt8768 Version -
   Mediatek ≫ Mt8771 Version -
   Mediatek ≫ Mt8775 Version -
   Mediatek ≫ Mt8781 Version -
   Mediatek ≫ Mt8786 Version -
   Mediatek ≫ Mt8788 Version -
   Mediatek ≫ Mt8789 Version -
   Mediatek ≫ Mt8791t Version -
   Mediatek ≫ Mt8792 Version -
   Mediatek ≫ Mt8795t Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8797 Version -
   Mediatek ≫ Mt8798 Version -

Google ≫ Android Version 13.0

Google ≫ Android Version 14.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.172

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

https://corp.mediatek.com/product-security-bulletin/July-2024

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20078

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20078

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20078

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-20078