CVE-2024-20046: Integer Overflow
First published: Mon Apr 01 2024(Updated: )
In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08485622; Issue ID: ALPS08485622.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Android | =12.0 | |
| Any of | ||
| MediaTek MT6761 | ||
| MediaTek MT6765 | ||
| MediaTek MT6768 | ||
| MediaTek M6789 | ||
| MediaTek MT6833 | ||
| MediaTek MT6855 | ||
| MediaTek MT6895 | ||
| MediaTek MT8167 | ||
| MediaTek MT8168 | ||
| MediaTek MT8188 | ||
| MediaTek MT8321 | ||
| MediaTek MT8765 | ||
| MediaTek MT8766Z | ||
| MediaTek MT8768 | ||
| MediaTek MT8781 WiFi | ||
| MediaTek MT8786 | ||
| MediaTek MT8788 Firmware | ||
| MediaTek MT8789 | ||
| MediaTek MT8791T | ||
| MediaTek MT8797 WiFi | ||
| MediaTek MT8798 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-20046?
The severity of CVE-2024-20046 is significant due to the potential for local escalation of privileges with system execution rights.
How do I fix CVE-2024-20046?
You can fix CVE-2024-20046 by applying the patch identified as ALPS08485622.
What kind of attack is CVE-2024-20046 associated with?
CVE-2024-20046 is associated with a local escalation of privilege attack due to an integer overflow vulnerability.
Is user interaction required to exploit CVE-2024-20046?
No, user interaction is not needed for the exploitation of CVE-2024-20046.
Which software is affected by CVE-2024-20046?
CVE-2024-20046 affects devices running Android 12.0 and certain MediaTek processor variants.
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/google
- canonical/android
- version/android/12.0
- vendor/mediatek
- canonical/mediatek mt6761
- canonical/mediatek mt6765
- canonical/mediatek mt6768
- canonical/mediatek m6789
- canonical/mediatek mt6833
- canonical/mediatek mt6855
- canonical/mediatek mt6895
- canonical/mediatek mt8167
- canonical/mediatek mt8168
- canonical/mediatek mt8188
- canonical/mediatek mt8321
- canonical/mediatek mt8765
- canonical/mediatek mt8766z
- canonical/mediatek mt8768
- canonical/mediatek mt8781 wifi
- canonical/mediatek mt8786
- canonical/mediatek mt8788 firmware
- canonical/mediatek mt8789
- canonical/mediatek mt8791t
- canonical/mediatek mt8797 wifi
- canonical/mediatek mt8798