CVE-2024-20091: Medium severity Google Android vulnerability
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-10-05 - Upgrade
Upgrade
vdecto a version that resolves this vulnerability.Patch ALPS09028313
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20091?
CVE-2024-20091 has a severity rating that indicates a potential for local information disclosure due to an out of bounds read.
How do I fix CVE-2024-20091?
To fix CVE-2024-20091, apply the patch ID ALPS09028313 available from Google.
Who is affected by CVE-2024-20091?
CVE-2024-20091 primarily affects devices running Google Android version 12.0.
What are the repercussions of CVE-2024-20091 exploitation?
Exploitation of CVE-2024-20091 could lead to local information disclosure with system execution privileges.
Is user interaction required to exploit CVE-2024-20091?
No, user interaction is not needed for the exploitation of CVE-2024-20091.