CVE-2024-20024
First published: Mon Mar 04 2024(Updated: )
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| All of | ||
| Any of | ||
| Android | =12.0 | |
| Android | =13.0 | |
| Android | =14.0 | |
| Any of | ||
| MediaTek MT6781 | ||
| MediaTek M6789 | ||
| MediaTek MT6833 | ||
| MediaTek MT6835 | ||
| MediaTek MT6879 | ||
| MediaTek MT6886 | ||
| MediaTek MT6895 | ||
| MediaTek MT6983 | ||
| MediaTek MT6985T | ||
| MediaTek MT6989 | ||
| MediaTek MT8666 | ||
| MediaTek MT8666 | ||
| Mediatek Mt8666b | ||
| MediaTek MT8667 | ||
| MediaTek MT8673 | ||
| MediaTek MT8676 | ||
| MediaTek MT8678 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-20024?
CVE-2024-20024 is a high severity vulnerability that allows local escalation of privilege.
How do I fix CVE-2024-20024?
To fix CVE-2024-20024, apply the security patch with ID ALPS08541635 as soon as it is available.
What is the risk of CVE-2024-20024?
The risk of CVE-2024-20024 includes potential unauthorized access to system-level privileges on affected devices.
Is user interaction required for exploiting CVE-2024-20024?
No, user interaction is not needed to exploit CVE-2024-20024.
Which software is affected by CVE-2024-20024?
CVE-2024-20024 affects devices running Google Android.
- agent/description
- agent/type
- agent/author
- agent/references
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/google
- canonical/android
- version/android/12.0
- version/android/13.0
- version/android/14.0
- vendor/mediatek
- canonical/mediatek mt6781
- canonical/mediatek m6789
- canonical/mediatek mt6833
- canonical/mediatek mt6835
- canonical/mediatek mt6879
- canonical/mediatek mt6886
- canonical/mediatek mt6895
- canonical/mediatek mt6983
- canonical/mediatek mt6985t
- canonical/mediatek mt6989
- canonical/mediatek mt8666
- canonical/mediatek mt8666b
- canonical/mediatek mt8667
- canonical/mediatek mt8673
- canonical/mediatek mt8676
- canonical/mediatek mt8678