CVE-2024-20039: High severity MediaTek Lr12a vulnerability
In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-04-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01240012
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20039?
CVE-2024-20039 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2024-20039?
To fix CVE-2024-20039, apply the patch ID MOLY01240012 provided by the vendor.
What systems are affected by CVE-2024-20039?
CVE-2024-20039 primarily affects devices running Google Android that utilize the modem protocol.
Can CVE-2024-20039 be exploited without user interaction?
Yes, CVE-2024-20039 can be exploited remotely without any user interaction required.
What could happen if CVE-2024-20039 is successfully exploited?
If exploited, CVE-2024-20039 could allow an attacker to execute arbitrary code on the affected system.