CVE-2024-20083

In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08810810 / ALPS08805789; Issue ID: MSV-1502.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@mediatek.com

Published

2024-08-14

Last modified

2024-08-21

Weaknesses

CWE-787

Affected products

• Android (Google)
• Mt6765 (Mediatek)
• Mt6768 (Mediatek)
• Mt6779 (Mediatek)
• Mt6785 (Mediatek)
• Mt8321 (Mediatek)
• Mt8385 (Mediatek)
• Mt8666 (Mediatek)
• Mt8667 (Mediatek)
• Mt8755 (Mediatek)
• Mt8765 (Mediatek)
• Mt8766 (Mediatek)
• Mt8768 (Mediatek)
• Mt8771 (Mediatek)
• Mt8775 (Mediatek)
• Mt8781 (Mediatek)
• Mt8786 (Mediatek)
• Mt8788 (Mediatek)
• Mt8789 (Mediatek)
• Mt8791t (Mediatek)
• Mt8792 (Mediatek)
• Mt8795t (Mediatek)
• Mt8796 (Mediatek)
• Mt8797 (Mediatek)
• Mt8798 (Mediatek)
• Mt6765 (Mediatek Inc.)
• Mt6768 (Mediatek Inc.)
• Mt6779 (Mediatek Inc.)
• Mt6785 (Mediatek Inc.)
• Mt8321 (Mediatek Inc.)
• Mt8385 (Mediatek Inc.)
• Mt8666 (Mediatek Inc.)
• Mt8667 (Mediatek Inc.)
• Mt8755 (Mediatek Inc.)
• Mt8765 (Mediatek Inc.)
• Mt8766 (Mediatek Inc.)
• Mt8768 (Mediatek Inc.)
• Mt8771 (Mediatek Inc.)
• Mt8775 (Mediatek Inc.)
• Mt8781 (Mediatek Inc.)
• Mt8786 (Mediatek Inc.)
• Mt8788 (Mediatek Inc.)
• Mt8789 (Mediatek Inc.)
• Mt8791t (Mediatek Inc.)
• Mt8792 (Mediatek Inc.)
• Mt8795t (Mediatek Inc.)
• Mt8796 (Mediatek Inc.)
• Mt8797 (Mediatek Inc.)
• Mt8798 (Mediatek Inc.)

References

• https://corp.mediatek.com/product-security-bulletin/August-2024