CVE-2024-20136
First published: Mon Dec 02 2024(Updated: )
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| RDK Central RDKB | =2022q3 | |
| RDK Central RDKB | =2024q1 | |
| Android | =12.0 | |
| Android | =13.0 | |
| Android | =14.0 | |
| Android | =15.0 | |
| Open edX | =19.07.0 | |
| Open edX | =21.02.0 | |
| Open edX | =23.05 | |
| Any of | ||
| MediaTek MT2737 | ||
| MediaTek MT6781 | ||
| MediaTek M6789 | ||
| MediaTek MT6855 | ||
| MediaTek MT6878 | ||
| MediaTek MT6879 | ||
| MediaTek MT6880 | ||
| MediaTek MT6886 | ||
| MediaTek MT6890 | ||
| MediaTek MT6895 | ||
| MediaTek MT6897 | ||
| MediaTek MT6980D | ||
| MediaTek MT6983 | ||
| MediaTek MT6985T | ||
| MediaTek MT6989 | ||
| MediaTek MT6990 | ||
| MediaTek MT8195Z | ||
| MediaTek MT8370 | ||
| MediaTek MT8390 | ||
| MediaTek MT8673 | ||
| MediaTek MT8676 | ||
| MediaTek MT8678 | ||
| MediaTek MT8755 | ||
| MediaTek MT8775 | ||
| MediaTek MT8781 WiFi | ||
| MediaTek MT8795T | ||
| MediaTek MT8796 | ||
| MediaTek MT8798 | ||
| MediaTek MT8893 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-20136?
The severity of CVE-2024-20136 is classified as local information disclosure due to an out of bounds read.
How do I fix CVE-2024-20136?
To fix CVE-2024-20136, apply the patch identified as ALPS09121847.
Which software versions are affected by CVE-2024-20136?
CVE-2024-20136 affects RDK Central RDKB versions 2022q3 and 2024q1, as well as various versions of Android and OpenWRT.
Is user interaction required to exploit CVE-2024-20136?
No, user interaction is not needed for exploitation of CVE-2024-20136.
What can be the potential impact of CVE-2024-20136?
The potential impact of CVE-2024-20136 includes unauthorized access to sensitive local information without requiring additional execution privileges.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- vendor/rdkcentral
- canonical/rdk central rdkb
- version/rdk central rdkb/2022q3
- version/rdk central rdkb/2024q1
- vendor/google
- canonical/android
- version/android/12.0
- version/android/13.0
- version/android/14.0
- version/android/15.0
- vendor/openwrt
- canonical/open edx
- version/open edx/19.07.0
- version/open edx/21.02.0
- version/open edx/23.05
- vendor/mediatek
- canonical/mediatek mt2737
- canonical/mediatek mt6781
- canonical/mediatek m6789
- canonical/mediatek mt6855
- canonical/mediatek mt6878
- canonical/mediatek mt6879
- canonical/mediatek mt6880
- canonical/mediatek mt6886
- canonical/mediatek mt6890
- canonical/mediatek mt6895
- canonical/mediatek mt6897
- canonical/mediatek mt6980d
- canonical/mediatek mt6983
- canonical/mediatek mt6985t
- canonical/mediatek mt6989
- canonical/mediatek mt6990
- canonical/mediatek mt8195z
- canonical/mediatek mt8370
- canonical/mediatek mt8390
- canonical/mediatek mt8673
- canonical/mediatek mt8676
- canonical/mediatek mt8678
- canonical/mediatek mt8755
- canonical/mediatek mt8775
- canonical/mediatek mt8781 wifi
- canonical/mediatek mt8795t
- canonical/mediatek mt8796
- canonical/mediatek mt8798
- canonical/mediatek mt8893