Lucene search
HistoryMay 06, 2024 - 3:15 a.m.
CVE-2024-20021
atf
spm
logic error
local privilege escalation
system execution
patch alps08584568
issue msv-1249
nvd
In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt6768
ORmediatekmt6781
ORmediatekmt6785
ORmediatekmt6833
ORmediatekmt6853
ORmediatekmt6873
ORmediatekmt6877
ORmediatekmt6885
ORmediatekmt6893
ORmediatekmt8168
ORmediatekmt8183
ORmediatekmt8188
ORmediatekmt8188t
ORmediatekmt8195
ORmediatekmt8195z
ORmediatekmt8321
ORmediatekmt8362a
ORmediatekmt8365
ORmediatekmt8385
ORmediatekmt8666
ORmediatekmt8666a
ORmediatekawus036nh
ORmediatekmt8667
ORmediatekmt8673
ORmediatekmt8675
ORmediatekmt8675
ORmediatekmt8676
ORmediatekawus036nh
ORmediatekmt8765
ORmediatekmt8766
ORmediatekmt8766z
ORmediatekmt8768
ORmediatekmt8768a
ORmediatekmt8768b
ORmediatekmt8768t
ORmediatekmt8768z
ORmediatekmt8781
ORmediatekmt8781
ORmediatekmt8786
ORmediatekmt8788
ORmediatekmt8788t
ORmediatekmt8788
ORmediatekmt8788x
ORmediatekmt8788z
ORmediatekmt8792
ORmediatekmt8795t
ORmediatekmt8796
ORmediatekmt8798
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt6768 | * | cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:* |
| mediatek | mt6781 | * | cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:* |
| mediatek | mt6785 | * | cpe:2.3:h:mediatek:mt6785:*:*:*:*:*:*:*:* |
| mediatek | mt6833 | * | cpe:2.3:h:mediatek:mt6833:*:*:*:*:*:*:*:* |
| mediatek | mt6853 | * | cpe:2.3:h:mediatek:mt6853:*:*:*:*:*:*:*:* |
| mediatek | mt6873 | * | cpe:2.3:h:mediatek:mt6873:*:*:*:*:*:*:*:* |
| mediatek | mt6877 | * | cpe:2.3:h:mediatek:mt6877:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2024-20021
2024-05-06 03:15:09
cvelist
cvelist
CVE-2024-20021
2024-05-06 02:52:01
vulnrichment
vulnrichment
CVE-2024-20021
2024-05-06 02:52:01