CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20091

In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.8%

CVSS Severity

CVSS v3 Score 4.4

References

https://corp.mediatek.com/product-security-bulletin/October-2024

Products affected by CVE-2024-20091

Mediatek » Mt6761 » Version: N/A

cpe:2.3:h:mediatek:mt6761:-
Mediatek » Mt6765 » Version: N/A

cpe:2.3:h:mediatek:mt6765:-
Mediatek » Mt6768 » Version: N/A

cpe:2.3:h:mediatek:mt6768:-
Mediatek » Mt6779 » Version: N/A

cpe:2.3:h:mediatek:mt6779:-
Mediatek » Mt6785 » Version: N/A

cpe:2.3:h:mediatek:mt6785:-
Mediatek » Mt6853 » Version: N/A

cpe:2.3:h:mediatek:mt6853:-
Mediatek » Mt6873 » Version: N/A

cpe:2.3:h:mediatek:mt6873:-
Mediatek » Mt6885 » Version: N/A

cpe:2.3:h:mediatek:mt6885:-
Mediatek » Mt8385 » Version: N/A

cpe:2.3:h:mediatek:mt8385:-
Mediatek » Mt8666 » Version: N/A

cpe:2.3:h:mediatek:mt8666:-
Mediatek » Mt8667 » Version: N/A

cpe:2.3:h:mediatek:mt8667:-
Mediatek » Mt8766 » Version: N/A

cpe:2.3:h:mediatek:mt8766:-
Mediatek » Mt8768 » Version: N/A

cpe:2.3:h:mediatek:mt8768:-
Mediatek » Mt8781 » Version: N/A

cpe:2.3:h:mediatek:mt8781:-
Mediatek » Mt8788 » Version: N/A

cpe:2.3:h:mediatek:mt8788:-
Mediatek » Mt8789 » Version: N/A

cpe:2.3:h:mediatek:mt8789:-
Google » Android » Version: 12.0

cpe:2.3:o:google:android:12.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20091

Products

Pricing

Contact Us