CVE-2024-20090
10/7/2024 3:15:00 AM
8 ماه قبل
2 ماه قبل
8
Reporter :security@mediatek.com
Modified :10/7/2024 3:15:00 AM
Problem Data :CWE-787,CWE-787
Description
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.
Cvss Version 3.1
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | Local |
| Attack Complexity | Low |
| Privileges Required | High |
| User Interaction | None |
| Scope | Unchanged |
| Confidentiality Impact | High |
| Integrity Impact | High |
| Availability Impact | High |
EPSS
| Epss Score | 0.00036 |
|---|---|
| Epss Percentile | 0.09402 |
ریسک پائین:: این آسیب پذیری احتمال ارائه Exploit پائینی دارد. به روز رسانی و نظارت معمولی را لحاظ نمائید.
پیشنهادات:
- به بروزرسانی مداوم سیستم و یا شبکه خود ادامه دهید.
- از بروزرسانی های آتی این آسیب پذیری مطلع شوید.
Affected Products (Configurations)
| CPE | Vendor | Product | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:* | mediatek | mt8667 | - | * |
| cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* | mediatek | mt8788 | - | * |
| cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:* | mediatek | mt6785 | - | * |
| cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:* | mediatek | mt6779 | - | * |
| cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:* | mediatek | mt8766 | - | * |
| cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:* | mediatek | mt8768 | - | * |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | android | 12.0 | * | |
| cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:* | mediatek | mt6765 | - | * |
| cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:* | mediatek | mt6873 | - | * |
| cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:* | mediatek | mt6761 | - | * |
| cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:* | mediatek | mt8789 | - | * |
| cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:* | mediatek | mt6768 | - | * |
| cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:* | mediatek | mt6853 | - | * |
| cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:* | mediatek | mt8385 | - | * |
| cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* | mediatek | mt8781 | - | * |
| cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* | mediatek | mt8666 | - | * |
| cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:* | mediatek | mt6885 | - | * |
Reference
| لینک | منبع | تگ ها |
|---|---|---|
| https://corp.mediatek.com/product-security-bulletin/October-2024 | Vendor Advisory |