In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use…
6.7Orta
CVE-2024-20110
Açıklama
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065887; Issue ID: MSV-1762.
Zayıflık türü (CWE):
CWE-787
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| android | 12.0, 13.0, 14.0, 15.0 | ||
| mediatek | mt6765 | 0 | |
| MediaTek, Inc. | MT6765, MT6768, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 | Android 12.0, 13.0, 14.0, 15.0 | |
| mediatek | mt6768 | 0 | |
| mediatek | mt6833 | 0 | |
| mediatek | mt6853 | 0 | |
| mediatek | mt6873 | 0 | |
| mediatek | mt6877 | 0 | |
| mediatek | mt6885 | 0 | |
| mediatek | mt6893 | 0 | |
| mediatek | mt8188 | 0 | |
| mediatek | mt8195 | 0 |