CVE-2024-20074

CVE-2024-20074

Vendor Mediatek, Inc.
Product MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6983, MT6985, MT6989, MT8666, MT8667, MT8673, MT8676
Weakness CWE-787
Published June 3, 2024
Last update August 1, 2024

CVSS base score

What the vulnerability does

01Description

In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: MSV-1333.

Key dates

02Disclosure timeline

June 3, 2024 CVE published
August 1, 2024 Record updated