CVE-2024-20078

CVE-2024-20078

Vendor Mediatek, Inc.
Product MT6768, MT6779, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798
Weakness CWE-843
Published July 1, 2024
Last update August 1, 2024

CVSS base score

What the vulnerability does

01Description

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08737250; Issue ID: MSV-1452.

Key dates

02Disclosure timeline

July 1, 2024 CVE published
August 1, 2024 Record updated