IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.7Medium

CVE-2024-20115

MediaTek, Inc. MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195; mediatek mt6833; mediatek mt6853; mediatek mt6873 Published: (1 year ago)

Description

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036695; Issue ID: MSV-1713.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
google android 12.0, 13.0, 14.0, 15.0
mediatek mt6833 0
MediaTek, Inc. MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 Android 12.0, 13.0, 14.0, 15.0
mediatek mt6853 0
mediatek mt6873 0
mediatek mt6877 0
mediatek mt6885 0
mediatek mt6893 0
mediatek mt8188 0
mediatek mt8195 0

References and patches

Recent CVEs in the same product — Android

6.7Medium
CVE-2026-56952
Google Android

In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

6.8Medium
CVE-2026-56936
Google Android

In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.0High
CVE-2026-56906
Google Android

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

9.8Critical
CVE-2026-55330
Google Android

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-55307
Google Android

In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-0198
Google Android

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.