Lucene search

K
cve[email protected]CVE-2024-20033
HistoryMar 04, 2024 - 3:15 a.m.

CVE-2024-20033

2024-03-0403:15:07
web.nvd.nist.gov
33
cve-2024-20033
information disclosure
nvram
bounds check
patch
alps08499945
nvd

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.

Affected configurations

Vulners
Node
googleandroidRange<12.0
OR
googleandroidRange<13.0
OR
googleandroidRange<14.0
OR
mediatekmt2713
OR
mediatekmt6739
OR
mediatekmt6761
OR
mediatekmt6765
OR
mediatekmt6768
OR
mediatekmt6771
OR
mediatekmt6779
OR
mediatekmt6785
OR
mediatekmt6789
OR
mediatekmt6835
OR
mediatekmt6855
OR
mediatekmt6879
OR
mediatekmt6883
OR
mediatekmt6885
OR
mediatekmt6886
OR
mediatekmt6893
OR
mediatekmt6895
OR
mediatekmt6983
OR
mediatekmt6985
OR
mediatekmt8167
OR
mediatekmt8167s
OR
mediatekmt8168
OR
mediatekmt8173
OR
mediatekmt8175
OR
mediatekmt8185
OR
mediatekmt8188
OR
mediatekmt8195
OR
mediatekmt8321
OR
mediatekmt8362a
OR
mediatekmt8365
OR
mediatekawus036nh
OR
mediatekmt8385
OR
mediatekmt8390
OR
mediatekmt8395
OR
mediatekmt8666
OR
mediatekmt8667
OR
mediatekmt8673
OR
mediatekmt8675
OR
mediatekmt8676
OR
mediatekawus036nh
OR
mediatekmt8755
OR
mediatekmt8765
OR
mediatekmt8766
OR
mediatekmt8768
OR
mediatekmt8775
OR
mediatekmt8781
OR
mediatekmt8786
OR
mediatekmt8788
OR
mediatekmt8789
OR
mediatekmt8791
OR
mediatekmt8792
OR
mediatekmt8796
OR
mediatekmt8797
OR
mediatekmt8798
VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt2713*cpe:2.3:h:mediatek:mt2713:*:*:*:*:*:*:*:*
mediatekmt6739*cpe:2.3:h:mediatek:mt6739:*:*:*:*:*:*:*:*
mediatekmt6761*cpe:2.3:h:mediatek:mt6761:*:*:*:*:*:*:*:*
mediatekmt6765*cpe:2.3:h:mediatek:mt6765:*:*:*:*:*:*:*:*
mediatekmt6768*cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:*
mediatekmt6771*cpe:2.3:h:mediatek:mt6771:*:*:*:*:*:*:*:*
mediatekmt6779*cpe:2.3:h:mediatek:mt6779:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 571

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2713, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789, MT6835, MT6855, MT6879, MT6883, MT6885, MT6886, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8792, MT8796, MT8797, MT8798",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0",
        "status": "affected"
      }
    ]
  }
]

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-20033