CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20106

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08960505; Issue ID: MSV-1590.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.5%

CVSS Severity

CVSS v3 Score 6.7

References

https://corp.mediatek.com/product-security-bulletin/November-2024

Products affected by CVE-2024-20106

Mediatek » Mt6739 » Version: N/A

cpe:2.3:h:mediatek:mt6739:-
Mediatek » Mt6761 » Version: N/A

cpe:2.3:h:mediatek:mt6761:-
Mediatek » Mt6765 » Version: N/A

cpe:2.3:h:mediatek:mt6765:-
Mediatek » Mt6768 » Version: N/A

cpe:2.3:h:mediatek:mt6768:-
Mediatek » Mt6779 » Version: N/A

cpe:2.3:h:mediatek:mt6779:-
Mediatek » Mt6785 » Version: N/A

cpe:2.3:h:mediatek:mt6785:-
Mediatek » Mt6853 » Version: N/A

cpe:2.3:h:mediatek:mt6853:-
Mediatek » Mt6873 » Version: N/A

cpe:2.3:h:mediatek:mt6873:-
Mediatek » Mt6885 » Version: N/A

cpe:2.3:h:mediatek:mt6885:-
Mediatek » Mt8666 » Version: N/A

cpe:2.3:h:mediatek:mt8666:-
Mediatek » Mt8667 » Version: N/A

cpe:2.3:h:mediatek:mt8667:-
Mediatek » Mt8673 » Version: N/A

cpe:2.3:h:mediatek:mt8673:-
Mediatek » Mt8678 » Version: N/A

cpe:2.3:h:mediatek:mt8678:-
Google » Android » Version: 12.0

cpe:2.3:o:google:android:12.0
Google » Android » Version: 13.0

cpe:2.3:o:google:android:13.0
Google » Android » Version: 14.0

cpe:2.3:o:google:android:14.0
Google » Android » Version: 15.0

cpe:2.3:o:google:android:15.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20106

Products

Pricing

Contact Us