CVE-2024-20002
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - security@mediatek.com
- Published
- 2024-02-05
- Last modified
- 2025-06-17
- Weaknesses
- CWE-787
Affected products
- Android (Google)
- Mt5583 (Mediatek Inc.)
- Mt5586 (Mediatek Inc.)
- Mt5691 (Mediatek Inc.)
- Mt5695 (Mediatek Inc.)
- Mt5696 (Mediatek Inc.)
- Mt9010 (Mediatek Inc.)
- Mt9011 (Mediatek Inc.)
- Mt9012 (Mediatek Inc.)
- Mt9015 (Mediatek Inc.)
- Mt9016 (Mediatek Inc.)
- Mt9020 (Mediatek Inc.)
- Mt9021 (Mediatek Inc.)
- Mt9022 (Mediatek Inc.)
- Mt9025 (Mediatek Inc.)
- Mt9026 (Mediatek Inc.)
- Mt9216 (Mediatek Inc.)
- Mt9218 (Mediatek Inc.)
- Mt9220 (Mediatek Inc.)
- Mt9221 (Mediatek Inc.)
- Mt9222 (Mediatek Inc.)
- Mt9255 (Mediatek Inc.)
- Mt9256 (Mediatek Inc.)
- Mt9266 (Mediatek Inc.)
- Mt9269 (Mediatek Inc.)
- Mt9286 (Mediatek Inc.)
- Mt9288 (Mediatek Inc.)
- Mt9602 (Mediatek Inc.)
- Mt9603 (Mediatek Inc.)
- Mt9610 (Mediatek Inc.)
- Mt9611 (Mediatek Inc.)
- Mt9612 (Mediatek Inc.)
- Mt9613 (Mediatek Inc.)
- Mt9615 (Mediatek Inc.)
- Mt9617 (Mediatek Inc.)
- Mt9618 (Mediatek Inc.)
- Mt9629 (Mediatek Inc.)
- Mt9630 (Mediatek Inc.)
- Mt9631 (Mediatek Inc.)
- Mt9632 (Mediatek Inc.)
- Mt9633 (Mediatek Inc.)
- Mt9636 (Mediatek Inc.)
- Mt9638 (Mediatek Inc.)
- Mt9639 (Mediatek Inc.)
- Mt9649 (Mediatek Inc.)
- Mt9650 (Mediatek Inc.)
- Mt9652 (Mediatek Inc.)
- Mt9653 (Mediatek Inc.)
- Mt9660 (Mediatek Inc.)
- Mt9666 (Mediatek Inc.)
- Mt9667 (Mediatek Inc.)
- Mt9669 (Mediatek Inc.)
- Mt9671 (Mediatek Inc.)
- Mt9675 (Mediatek Inc.)
- Mt9679 (Mediatek Inc.)
- Mt9685 (Mediatek Inc.)
- Mt9686 (Mediatek Inc.)
- Mt9688 (Mediatek Inc.)
- Mt9689 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/February-2024
