CVE-2024-20081

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

n gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412.

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/July-2024	Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/July-2024	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:linuxfoundation:yocto:2.6:::::::*
	cpe:2.3:a:linuxfoundation:yocto:3.3:::::::*
	cpe:2.3:a:linuxfoundation:yocto:4.0:::::::*
	cpe:2.3:a:rdkcentral:rdk-b:2022q3:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:openwrt:openwrt:19.07.0:-::::::
	cpe:2.3:o:openwrt:openwrt:21.02.0:-::::::
	cpe:2.3:o:openwrt:openwrt:22.03.5:::::::*

OR	cpe:2.3:h:mediatek:mt2735:-:::::::*
	cpe:2.3:h:mediatek:mt2737:-:::::::*
	cpe:2.3:h:mediatek:mt6761:-:::::::*
	cpe:2.3:h:mediatek:mt6765:-:::::::*
	cpe:2.3:h:mediatek:mt6768:-:::::::*
	cpe:2.3:h:mediatek:mt6781:-:::::::*
	cpe:2.3:h:mediatek:mt6785:-:::::::*
	cpe:2.3:h:mediatek:mt6789:-:::::::*
	cpe:2.3:h:mediatek:mt6833:-:::::::*
	cpe:2.3:h:mediatek:mt6853:-:::::::*
	cpe:2.3:h:mediatek:mt6853t:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6873:-:::::::*
	cpe:2.3:h:mediatek:mt6875:-:::::::*
	cpe:2.3:h:mediatek:mt6877:-:::::::*
	cpe:2.3:h:mediatek:mt6879:-:::::::*
	cpe:2.3:h:mediatek:mt6880:-:::::::*
	cpe:2.3:h:mediatek:mt6883:-:::::::*
	cpe:2.3:h:mediatek:mt6885:-:::::::*
	cpe:2.3:h:mediatek:mt6886:-:::::::*
	cpe:2.3:h:mediatek:mt6889:-:::::::*
	cpe:2.3:h:mediatek:mt6890:-:::::::*
	cpe:2.3:h:mediatek:mt6891:-:::::::*
	cpe:2.3:h:mediatek:mt6893:-:::::::*
	cpe:2.3:h:mediatek:mt6895:-:::::::*
	cpe:2.3:h:mediatek:mt6980:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt8666:-:::::::*
	cpe:2.3:h:mediatek:mt8667:-:::::::*
	cpe:2.3:h:mediatek:mt8673:-:::::::*
	cpe:2.3:h:mediatek:mt8676:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*

History

03 Feb 2025, 19:36

Type	Values Removed	Values Added
CPE		cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:o:openwrt:openwrt:19.07.0:-:::::: cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt6761:-:::::::* cpe:2.3:h:mediatek:mt2735:-:::::::* cpe:2.3:h:mediatek:mt6785:-:::::::* cpe:2.3:h:mediatek:mt8667:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6853t:-:::::::* cpe:2.3:h:mediatek:mt6877:-:::::::* cpe:2.3:a:linuxfoundation:yocto:3.3:::::::* cpe:2.3:h:mediatek:mt6880:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6875:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:h:mediatek:mt8673:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt2737:-:::::::* cpe:2.3:o:openwrt:openwrt:21.02.0:-:::::: cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:h:mediatek:mt6873:-:::::::* cpe:2.3:h:mediatek:mt6889:-:::::::* cpe:2.3:h:mediatek:mt6853:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:a:rdkcentral:rdk-b:2022q3:::::::* cpe:2.3:h:mediatek:mt6890:-:::::::* cpe:2.3:a:linuxfoundation:yocto:2.6:::::::* cpe:2.3:h:mediatek:mt6891:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:o:openwrt:openwrt:22.03.5:::::::* cpe:2.3:h:mediatek:mt6885:-:::::::* cpe:2.3:h:mediatek:mt8666:-:::::::* cpe:2.3:h:mediatek:mt6893:-:::::::* cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:h:mediatek:mt6980:-:::::::* cpe:2.3:h:mediatek:mt6768:-:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6833:-:::::::* cpe:2.3:h:mediatek:mt6765:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:a:linuxfoundation:yocto:4.0:::::::* cpe:2.3:h:mediatek:mt6883:-:::::::* cpe:2.3:h:mediatek:mt8676:-:::::::*
References	~~() https://corp.mediatek.com/product-security-bulletin/July-2024 -~~	() https://corp.mediatek.com/product-security-bulletin/July-2024 - Vendor Advisory
First Time		Mediatek mt6990 Mediatek mt8676 Mediatek mt6879 Mediatek mt6980 Mediatek mt6983 Openwrt openwrt Google Rdkcentral rdk-b Mediatek mt8667 Mediatek mt6765 Openwrt Mediatek mt2737 Mediatek mt6785 Mediatek mt2735 Mediatek mt6873 Mediatek mt6875 Mediatek Google android Mediatek mt6833 Mediatek mt6789 Mediatek mt8678 Mediatek mt6985 Mediatek mt6877 Mediatek mt6883 Mediatek mt6853 Mediatek mt6886 Mediatek mt6761 Mediatek mt6890 Mediatek mt6781 Linuxfoundation Mediatek mt6880 Linuxfoundation yocto Mediatek mt8666 Mediatek mt6768 Mediatek mt8673 Mediatek mt6885 Mediatek mt6989 Mediatek mt6893 Mediatek mt6895 Mediatek mt6853t Mediatek mt6855 Mediatek mt6889 Mediatek mt6891 Rdkcentral
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.7

21 Nov 2024, 08:51

Type	Values Removed	Values Added
References	~~() https://corp.mediatek.com/product-security-bulletin/July-2024 -~~	() https://corp.mediatek.com/product-security-bulletin/July-2024 -

01 Jul 2024, 12:37

Type	Values Removed	Values Added
Summary		(es) En el servicio gnss, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. Esto podría conducir a una escalada local de privilegios con permisos de ejecución de System necesarios. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS08719602; ID del problema: MSV-1412.