CVE-2024-20093: Medium severity Google Android vulnerability
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1699.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-10-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS09028313
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20093?
CVE-2024-20093 is classified as a vulnerability that could lead to local information disclosure.
How do I fix CVE-2024-20093?
To fix CVE-2024-20093, apply the patch identified as ALPS09028313.
What software is affected by CVE-2024-20093?
CVE-2024-20093 affects Google Android version 12.0 and may impact devices using MediaTek chipsets.
Is user interaction required to exploit CVE-2024-20093?
No, user interaction is not needed for the exploitation of CVE-2024-20093.
What type of impact does CVE-2024-20093 have?
CVE-2024-20093 may allow for local information disclosure due to an out of bounds read.