In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.
References
Link | Resource |
---|---|
https://corp.mediatek.com/product-security-bulletin/April-2024 | Vendor Advisory |
https://corp.mediatek.com/product-security-bulletin/April-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
23 Apr 2025, 13:46
Type | Values Removed | Values Added |
---|---|---|
References | () https://corp.mediatek.com/product-security-bulletin/April-2024 - Vendor Advisory | |
First Time |
Mediatek mt8168
Mediatek mt2713 Mediatek mt8781 Mediatek mt8370 Mediatek mt8173 Linuxfoundation yocto Mediatek mt8395 Mediatek mt8795t Mediatek mt8175 Mediatek mt8798 Mediatek iot Yocto Google android Mediatek mt8390 Mediatek mt8365 Mediatek mt8696 Mediatek Mediatek mt8871 Mediatek mt8188 Mediatek mt8195 Linuxfoundation Mediatek mt8673 |
|
CPE | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:* cpe:2.3:a:mediatek:iot_yocto:23.2:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:* |
26 Mar 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-125 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
21 Nov 2024, 08:51
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () https://corp.mediatek.com/product-security-bulletin/April-2024 - |
01 Apr 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-01 03:15
Updated : 2025-04-23 13:46
NVD link : CVE-2024-20055
Mitre link : CVE-2024-20055
CVE.ORG link : CVE-2024-20055
JSON object : View
Products Affected
mediatek
- mt8696
- mt8390
- iot_yocto
- mt8781
- mt8195
- mt8168
- mt2713
- mt8173
- mt8175
- mt8188
- mt8395
- mt8365
- mt8370
- mt8795t
- mt8673
- mt8871
- mt8798
- android
linuxfoundation
- yocto
CWE
CWE-125
Out-of-bounds Read