First published: Mon Feb 05 2024(Updated: )
In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566.
Credit: security@mediatek.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
=12.0 | ||
=13.0 | ||
Any of | ||
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-20012 has a high severity level due to the potential for local escalation of privilege and system execution.
To remediate CVE-2024-20012, apply the patch ID ALPS08358566 provided by the vendor.
CVE-2024-20012 affects devices running Google Android versions 12.0 and 13.0 affected by the vulnerability.
No, user interaction is not needed for the exploitation of CVE-2024-20012.
CVE-2024-20012 is a type confusion vulnerability leading to escalation of privilege.