CVE-2024-20082: Buffer Overflow
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594; Issue ID: MSV-1529.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05 - Upgrade
Upgrade
Modemto a version that resolves this vulnerability.Patch MOLY01182594
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20082?
CVE-2024-20082 is classified as a critical vulnerability due to the potential for remote code execution without additional privileges.
How do I fix CVE-2024-20082?
To mitigate CVE-2024-20082, it is essential to apply the patch identified by MOLY01182594.
What systems are affected by CVE-2024-20082?
CVE-2024-20082 affects devices running Google Android that utilize the vulnerable modem component.
Is user interaction required to exploit CVE-2024-20082?
No, user interaction is not needed for the exploitation of CVE-2024-20082.
What kind of attack does CVE-2024-20082 enable?
CVE-2024-20082 enables remote code execution, allowing attackers to execute arbitrary code on the affected device.