CVE-2024-20133

EPSS 0.18%
Veröffentlicht 02.12.2024 04:15:05
Zuletzt bearbeitet 22.04.2025 13:56:23
Erkennungen
Login

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mediatek ≫ Nr16 Version -

   Mediatek ≫ Mt6879 Version -
   Mediatek ≫ Mt6886 Version -
   Mediatek ≫ Mt6895 Version -
   Mediatek ≫ Mt6895t Version -
   Mediatek ≫ Mt6896 Version -
   Mediatek ≫ Mt6980 Version -
   Mediatek ≫ Mt6983 Version -
   Mediatek ≫ Mt8673 Version -
   Mediatek ≫ Mt8676 Version -
   Mediatek ≫ Mt8795t Version -
   Mediatek ≫ Mt8798 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.072

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/December-2024

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20133

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20133

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20133

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-20133