In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://corp.mediatek.com/product-security-bulletin/April-2024 | Vendor Advisory |
https://corp.mediatek.com/product-security-bulletin/April-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
23 Apr 2025, 13:46
Type | Values Removed | Values Added |
---|---|---|
First Time |
Linuxfoundation yocto
Mediatek mt8365 Mediatek mt8390 Mediatek mt8173 Google android Mediatek mt8798 Mediatek mt8175 Mediatek mt8195 Mediatek mt8188 Mediatek mt8781 Mediatek iot Yocto Mediatek mt8395 Mediatek Mediatek mt8168 Mediatek mt8871 Mediatek mt8370 Mediatek mt8673 Mediatek mt8696 Linuxfoundation Mediatek mt8795t Mediatek mt2713 |
|
References | () https://corp.mediatek.com/product-security-bulletin/April-2024 - Vendor Advisory | |
CPE | cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:* cpe:2.3:a:mediatek:iot_yocto:23.2:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* |
01 Apr 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-01 03:15
Updated : 2025-04-23 13:46
NVD link : CVE-2024-20055
Mitre link : CVE-2024-20055
JSON object : View
Products Affected
linuxfoundation
- yocto
mediatek
- mt8195
- mt2713
- mt8696
- iot_yocto
- mt8175
- mt8795t
- mt8365
- mt8370
- mt8168
- mt8781
- mt8673
- mt8871
- mt8173
- mt8395
- mt8390
- mt8798
- mt8188
- android
CWE
No CWE.