In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/March-2024 | Vendor Advisory |
| https://corp.mediatek.com/product-security-bulletin/March-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Jan 2025, 15:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Google
Mediatek mt8390 Mediatek mt8173 Google android Mediatek mt2715 Mediatek mt8195 Mediatek mt8188 Mediatek mt8395 Mediatek mt2713 Mediatek |
|
| References | () https://corp.mediatek.com/product-security-bulletin/March-2024 - Vendor Advisory | |
| CPE | cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt2715:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
| CWE | CWE-787 |
04 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-04 03:15
Updated : 2025-03-28 20:15
NVD link : CVE-2024-20020
Mitre link : CVE-2024-20020
JSON object : View
Products Affected
mediatek
- mt2713
- mt8395
- mt8390
- mt8188
- mt2715
- mt8173
- mt8195
- android
CWE
CWE-787
Out-of-bounds Write