CVE-2024-20064: Input Validation
Published May 6, 2024
·Updated
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08572601; Issue ID: MSV-1229.
Affected Software
31 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Any of the following
MediaTek Mt6580
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6768
MediaTek Mt6781
MediaTek Mt6789
MediaTek Mt6833
MediaTek Mt6853
MediaTek Mt6853t
MediaTek Mt6855
MediaTek Mt6873
MediaTek Mt6875
MediaTek Mt6877
MediaTek Mt6879
MediaTek Mt6883
MediaTek Mt6885
MediaTek Mt6886
MediaTek Mt6889
MediaTek Mt6891
MediaTek Mt6893
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt6985
MediaTek Mt6989
MediaTek Mt8678
MediaTek Mt8755
MediaTek Mt8775
MediaTek Mt8792
MediaTek Mt8796
Event History
May 6, 2024
CVE Published
via MITRE·02:51 AM
Data Sourced
via MITRE·02:51 AM
DescriptionWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-20064?
CVE-2024-20064 is classified as a local escalation of privilege vulnerability.
2
How do I fix CVE-2024-20064?
To resolve CVE-2024-20064, apply the patch with ID ALPS08572601.
3
Which versions of Android are affected by CVE-2024-20064?
CVE-2024-20064 affects Google Android versions 13.0 and 14.0.
4
Is user interaction required to exploit CVE-2024-20064?
No, user interaction is not needed for the exploitation of CVE-2024-20064.
5
Can CVE-2024-20064 lead to remote exploitation?
No, CVE-2024-20064 is limited to local escalation of privilege with no remote exploitation potential.