CVE-2024-20020: Medium severity Google Android vulnerability
In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05 - Upgrade
Upgrade
OPTEEto a version that resolves this vulnerability.Patch ALPS08522504
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20020?
CVE-2024-20020 has a severity level that indicates it could lead to local information disclosure with system execution privileges required.
How do I fix CVE-2024-20020?
To fix CVE-2024-20020, apply the patch identified by ALPS08522504.
What type of vulnerability is CVE-2024-20020?
CVE-2024-20020 is an out of bounds write vulnerability caused by an incorrect bounds check.
Which systems are affected by CVE-2024-20020?
CVE-2024-20020 affects Google Android version 13.0 and possibly other systems using OPTEE.
Is user interaction required to exploit CVE-2024-20020?
No, user interaction is not needed for exploitation of CVE-2024-20020.