CVE-2024-20134
First published: Mon Dec 02 2024(Updated: )
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09154589; Issue ID: MSV-1866.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Android | =13.0 | |
| Android | =14.0 | |
| Android | =15.0 | |
| Any of | ||
| MediaTek MT6835 | ||
| MediaTek MT6878 | ||
| MediaTek MT6879 | ||
| MediaTek MT6895 | ||
| MediaTek MT6896 | ||
| MediaTek MT6897 | ||
| MediaTek MT6983 | ||
| MediaTek MT6985T | ||
| MediaTek MT6989 | ||
| MediaTek MT8755 | ||
| MediaTek MT8775 | ||
| MediaTek MT8796 | ||
| MediaTek MT8798 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-20134?
The severity of CVE-2024-20134 is high as it allows for local escalation of privileges.
How do I fix CVE-2024-20134?
To fix CVE-2024-20134, apply the patch indicated by Patch ID ALPS09154589.
Does CVE-2024-20134 require user interaction for exploitation?
No, CVE-2024-20134 does not require user interaction for exploitation.
Which versions of Android are affected by CVE-2024-20134?
CVE-2024-20134 affects Android versions 13.0, 14.0, and 15.0.
What could be the potential impact of CVE-2024-20134?
The potential impact of CVE-2024-20134 includes local escalation of privilege, allowing unauthorized access to system features.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/google
- canonical/android
- version/android/13.0
- version/android/14.0
- version/android/15.0
- vendor/mediatek
- canonical/mediatek mt6835
- canonical/mediatek mt6878
- canonical/mediatek mt6879
- canonical/mediatek mt6895
- canonical/mediatek mt6896
- canonical/mediatek mt6897
- canonical/mediatek mt6983
- canonical/mediatek mt6985t
- canonical/mediatek mt6989
- canonical/mediatek mt8755
- canonical/mediatek mt8775
- canonical/mediatek mt8796
- canonical/mediatek mt8798