CVE-2024-20013: Medium severity Google Android vulnerability

Published Feb 5, 2024

Updated

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08471742; Issue ID: ALPS08308608.

Affected Software

61 affected components

All of the following

Any of the following

Google Android=11.0

Google Android=12.0

Google Android=13.0

Google Android=14.0

Any of the following

MediaTek Mt6580

MediaTek Mt6731

MediaTek Mt6735

MediaTek Mt6737

MediaTek Mt6739

MediaTek Mt6753

MediaTek MT6757

MediaTek Mt6757c

MediaTek Mt6757cd

MediaTek Mt6757ch

MediaTek Mt6761

MediaTek Mt6762

MediaTek Mt6763

MediaTek Mt6765

MediaTek Mt6768

MediaTek Mt6769

MediaTek Mt6771

MediaTek Mt6779

MediaTek Mt6781

MediaTek Mt6785

MediaTek Mt6789

MediaTek Mt6833

MediaTek Mt6835

MediaTek Mt6853

MediaTek Mt6853t

MediaTek Mt6855

MediaTek Mt6873

MediaTek Mt6875

MediaTek Mt6877

MediaTek Mt6879

MediaTek Mt6883

MediaTek Mt6885

MediaTek Mt6886

MediaTek Mt6889

MediaTek Mt6891

MediaTek Mt6893

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt6985

MediaTek Mt8185

MediaTek Mt8321

MediaTek Mt8385

MediaTek Mt8666

MediaTek Mt8667

MediaTek Mt8673

MediaTek Mt8675

MediaTek Mt8765

MediaTek Mt8766

MediaTek Mt8768

MediaTek Mt8781

MediaTek Mt8786

MediaTek Mt8788

MediaTek Mt8789

MediaTek Mt8791

MediaTek Mt8791t

MediaTek Mt8797

MediaTek Mt8798

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS08471742

Event History

Feb 5, 2024

CVE Published

via MITRE·05:59 AM

Data Sourced

via MITRE·05:59 AM

DescriptionWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-20013?

CVE-2024-20013 has a severity rating that suggests it could lead to local escalation of privilege due to an out of bounds write.

How do I fix CVE-2024-20013?

To fix CVE-2024-20013, apply the patch identified by ALPS08471742.

What software versions are affected by CVE-2024-20013?

CVE-2024-20013 affects Google Android versions 11.0, 12.0, 13.0, and 14.0.

Is user interaction required for exploiting CVE-2024-20013?

No, user interaction is not needed for exploiting CVE-2024-20013.

What could be the impact of CVE-2024-20013?

The impact of CVE-2024-20013 could lead to elevated system privileges for attackers.