CVE-2024-20002: Medium severity Google Android vulnerability

Published Feb 5, 2024

Updated

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715.

Affected Software

62 affected components

All of the following

Any of the following

Google Android=11.0

Google Android=12.0

Google Android=13.0

Google Android=14.0

Any of the following

MediaTek Mt5583

MediaTek Mt5586

MediaTek Mt5691

MediaTek Mt5695

MediaTek Mt5696

MediaTek Mt9010

MediaTek Mt9011

MediaTek Mt9012

MediaTek Mt9015

MediaTek Mt9016

MediaTek Mt9020

MediaTek Mt9021

MediaTek Mt9022

MediaTek Mt9025

MediaTek Mt9026

MediaTek Mt9216

MediaTek Mt9218

MediaTek Mt9220

MediaTek Mt9221

MediaTek Mt9222

MediaTek Mt9255

MediaTek Mt9256

MediaTek Mt9266

MediaTek Mt9269

MediaTek Mt9286

MediaTek Mt9288

MediaTek Mt9602

MediaTek Mt9603

MediaTek Mt9610

MediaTek Mt9611

MediaTek Mt9612

MediaTek Mt9613

MediaTek Mt9615

MediaTek Mt9617

MediaTek Mt9618

MediaTek Mt9629

MediaTek Mt9630

MediaTek Mt9631

MediaTek Mt9632

MediaTek Mt9633

MediaTek Mt9636

MediaTek Mt9638

MediaTek Mt9639

MediaTek Mt9649

MediaTek Mt9650

MediaTek Mt9652

MediaTek Mt9653

MediaTek Mt9660

MediaTek Mt9666

MediaTek Mt9667

MediaTek Mt9669

MediaTek Mt9671

MediaTek Mt9675

MediaTek Mt9679

MediaTek Mt9685

MediaTek Mt9686

MediaTek Mt9688

MediaTek Mt9689

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch DTV03961715

Event History

Feb 5, 2024

CVE Published

via MITRE·05:59 AM

Data Sourced

via MITRE·05:59 AM

DescriptionWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-20002?

CVE-2024-20002 has a critical severity level due to potential local privilege escalation resulting from an out of bounds write.

How do I fix CVE-2024-20002?

The recommended fix for CVE-2024-20002 is to apply the patch identified by Patch ID DTV03961715.

Which software versions are affected by CVE-2024-20002?

CVE-2024-20002 affects Google Android versions 11.0, 12.0, 13.0, and 14.0.

Is user interaction required to exploit CVE-2024-20002?

No, user interaction is not needed for the exploitation of CVE-2024-20002.

What are the potential consequences of exploiting CVE-2024-20002?

Exploiting CVE-2024-20002 could lead to local escalation of privileges, allowing malicious users to execute arbitrary code with system-level permissions.