CVE-2024-20094: High severity android vulnerability
Published Oct 7, 2024
·Updated
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.
Affected Software
22 affected components
Google Android
All of the following
MediaTek Nr15
Any of the following
MediaTek Mt2735
MediaTek Mt6833
MediaTek Mt6853
MediaTek Mt6855
MediaTek Mt6873
MediaTek Mt6875
MediaTek Mt6875t
MediaTek Mt6877
MediaTek Mt6880
MediaTek Mt6883
MediaTek Mt6885
MediaTek Mt6889
MediaTek Mt6890
MediaTek Mt6891
MediaTek Mt6893
MediaTek Mt8675
MediaTek Mt8771
MediaTek Mt8791
MediaTek Mt8791t
MediaTek Mt8797
Event History
Oct 7, 2024
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·02:35 AM
Data Sourced
via MITRE·02:35 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-20094?
CVE-2024-20094 is classified as a remote denial of service vulnerability that may cause a system crash due to a missing bounds check.
2
How do I fix CVE-2024-20094?
To fix CVE-2024-20094, apply the available patch identified as MOLY00843282.
3
Who is affected by CVE-2024-20094?
CVE-2024-20094 affects Google Android software that utilizes the modem.
4
Is user interaction required to exploit CVE-2024-20094?
No, user interaction is not required to exploit CVE-2024-20094.
5
What could be the impact of exploiting CVE-2024-20094?
The exploitation of CVE-2024-20094 could lead to a remote denial of service affecting the functionality of the system.