Lucene search
MediaTekCVE-2024-20079HistoryJul 01, 2024 - 5:15 a.m.
CVE-2024-20079
2024-07-0105:15:04
CWE-787
MediaTek
web.nvd.nist.gov
33
gnss service
out of bounds write
local privilege escalation
input validation
system execution privileges
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: MSV-1491.
Affected configurations
Node
googleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt6761_firmware
ORmediatekmt6765_firmware
ORmediatekmt6768_firmware
ORmediatekmt6781_firmware
ORmediatekmt6785_firmware
ORmediatekmt6789_firmware
ORmediatekmt6833_firmware
ORmediatekmt6853_firmware
ORmediatekmt6853t_firmware
ORmediatekmt6855_firmware
ORmediatekmt6873_firmware
ORmediatekmt6875_firmware
ORmediatekmt6877_firmware
ORmediatekmt6879_firmware
ORmediatekmt6883_firmware
ORmediatekmt6885_firmware
ORmediatekmt6886_firmware
ORmediatekmt6889_firmware
ORmediatekmt6891_firmware
ORmediatekmt6893_firmware
ORmediatekmt6895_firmware
ORmediatekmt6983_firmware
ORmediatekmt6985_firmware
ORmediatekmt6989_firmware
ORmediatekmt8666_firmware
ORmediatekmt8667_firmware
ORmediatekmt8673_firmware
ORmediatekmt8676_firmware
ORmediatekmt8678_firmware
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt6761_firmware | * | cpe:2.3:a:mediatek:mt6761_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6765_firmware | * | cpe:2.3:a:mediatek:mt6765_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6768_firmware | * | cpe:2.3:a:mediatek:mt6768_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6781_firmware | * | cpe:2.3:a:mediatek:mt6781_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6785_firmware | * | cpe:2.3:a:mediatek:mt6785_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6789_firmware | * | cpe:2.3:a:mediatek:mt6789_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6833_firmware | * | cpe:2.3:a:mediatek:mt6833_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6853_firmware | * | cpe:2.3:a:mediatek:mt6853_firmware:*:*:*:*:*:*:*:* |
| mediatek | mt6853t_firmware | * | cpe:2.3:a:mediatek:mt6853t_firmware:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT8666, MT8667, MT8673, MT8676, MT8678",
"versions": [
{
"version": "Android 13.0, 14.0",
"status": "affected"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-20079
2024-07-01 03:18:06
nvd
nvd
CVE-2024-20079
2024-07-01 05:15:04
cvelist
cvelist
CVE-2024-20079
2024-07-01 03:18:06