Lucene search
HistoryMay 06, 2024 - 3:15 a.m.
CVE-2024-20056
privilege escalation
preloader
insecure default value
local escalation
system execution privileges
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt6739
ORmediatekmt6761
ORmediatekmt6765
ORmediatekmt6768
ORmediatekmt6781
ORmediatekmt6785
ORmediatekmt6789
ORmediatekmt6833
ORmediatekmt6835
ORmediatekmt6853
ORmediatekmt6855
ORmediatekmt6873
ORmediatekmt6880
ORmediatekmt6885
ORmediatekmt6886
ORmediatekmt6890
ORmediatekmt6893
ORmediatekmt6895
ORmediatekmt6897
ORmediatekmt6983
ORmediatekmt6985
ORmediatekmt6989
ORmediatekmt8666
ORmediatekmt8667
ORmediatekmt8673
ORmediatekmt8676
ORmediatekawus036nh
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt6739 | * | cpe:2.3:h:mediatek:mt6739:*:*:*:*:*:*:*:* |
| mediatek | mt6761 | * | cpe:2.3:h:mediatek:mt6761:*:*:*:*:*:*:*:* |
| mediatek | mt6765 | * | cpe:2.3:h:mediatek:mt6765:*:*:*:*:*:*:*:* |
| mediatek | mt6768 | * | cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:* |
| mediatek | mt6781 | * | cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:* |
| mediatek | mt6785 | * | cpe:2.3:h:mediatek:mt6785:*:*:*:*:*:*:*:* |
| mediatek | mt6789 | * | cpe:2.3:h:mediatek:mt6789:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6739, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6880, MT6885, MT6886, MT6890, MT6893, MT6895, MT6897, MT6983, MT6985, MT6989, MT8666, MT8667, MT8673, MT8676, MT8678",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0 / OpenWRT 19.07, 21.02, 23.05 / RDK-B 2022q3",
"status": "affected"
}
]
}
]Social References
More
