CVE-2024-20058

CVE-2024-20058

Vendor Mediatek, Inc.
Product MT6765, MT6768, MT6785, MT6833, MT6853, MT6855, MT6893, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798
Weakness CWE-125
Published May 6, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204.

Key dates

02Disclosure timeline

May 6, 2024 CVE published
August 1, 2024 Record updated