CVE-2024-20144: Medium severity linuxfoundation Yocto vulnerability
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056; Issue ID: MSV-2041.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20144?
The severity of CVE-2024-20144 is high due to the potential for local escalation of privilege if an attacker has physical access to the affected device.
How do I fix CVE-2024-20144?
To fix CVE-2024-20144, ensure that you apply the patch with ID ALPS09167056 provided by your device manufacturer.
What platforms are affected by CVE-2024-20144?
CVE-2024-20144 affects devices running Google Android operating systems.
Is user interaction required to exploit CVE-2024-20144?
Yes, user interaction is needed for the exploitation of CVE-2024-20144.
Can CVE-2024-20144 lead to remote attacks?
No, CVE-2024-20144 requires physical access to the device to exploit the vulnerability.