CVE-2024-20024: Medium severity android vulnerability
Published Mar 4, 2024
·Updated
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.
Affected Software
21 affected components
Google Android
All of the following
Any of the following
Google Android=12.0
Google Android=13.0
Google Android=14.0
Any of the following
MediaTek Mt6781
MediaTek Mt6789
MediaTek Mt6833
MediaTek Mt6835
MediaTek Mt6879
MediaTek Mt6886
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt6985
MediaTek Mt6989
MediaTek Mt8666
MediaTek Mt8666a
MediaTek Mt8666b
MediaTek Mt8667
MediaTek Mt8673
MediaTek Mt8676
MediaTek Mt8678
Event History
Mar 4, 2024
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·02:43 AM
Data Sourced
via MITRE·02:43 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-20024?
CVE-2024-20024 is a high severity vulnerability that allows local escalation of privilege.
2
How do I fix CVE-2024-20024?
To fix CVE-2024-20024, apply the security patch with ID ALPS08541635 as soon as it is available.
3
What is the risk of CVE-2024-20024?
The risk of CVE-2024-20024 includes potential unauthorized access to system-level privileges on affected devices.
4
Is user interaction required for exploiting CVE-2024-20024?
No, user interaction is not needed to exploit CVE-2024-20024.
5
Which software is affected by CVE-2024-20024?
CVE-2024-20024 affects devices running Google Android.