CVE-2024-20095

CVE-2024-20095

Vendor Mediatek, Inc.
Product MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8666, MT8667, MT8673, MT8675, MT8678
Weakness CWE-125
Published October 7, 2024
Last update October 27, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1636.

Key dates

02Disclosure timeline

October 7, 2024 CVE published
October 27, 2024 Record updated