CVE-2024-20117

State: PUBLISHED · Published: 2024-11-04 · Updated: 2024-11-04 · Assigner: MediaTek

Description

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.

CWE

CWE-125 — CWE-125 Out-of-bounds Read

Affected

MediaTek, Inc. / MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 — v=Android 12.0 [affected]

CVSS

(none)

References

https://corp.mediatek.com/product-security-bulletin/November-2024

Source

cvelistV5-main/cves/2024/20xxx/CVE-2024-20117.json