CVE-2024-20112

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*

History

22 Apr 2025, 13:52

Type Values Removed Values Added
CWE CWE-125
First Time Mediatek mt6985
Mediatek mt6897
Mediatek mt6878
Google
Google android
Mediatek mt6886
Mediatek mt8676
Mediatek
References () https://corp.mediatek.com/product-security-bulletin/November-2024 - () https://corp.mediatek.com/product-security-bulletin/November-2024 - Vendor Advisory
CPE cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*

04 Nov 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-04 02:15

Updated : 2025-04-22 13:52


NVD link : CVE-2024-20112

Mitre link : CVE-2024-20112


JSON object : View

Products Affected

mediatek

  • mt6897
  • mt6985
  • mt6878
  • mt6886
  • mt8676

google

  • android
CWE
CWE-125

Out-of-bounds Read