CVE-2024-20005

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
MediaTek, Inc.MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891,Android 12.0, 13.0, 14.0
mediatekmt867812.0; 13.0; 14.0

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-200066.7In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200077.5In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no aCVE-2024-200098.8In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privileCVE-2024-20015.4A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload CVE-2024-200106.7In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystCVE-2024-200119.8In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with CVE-2024-200126.7In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystCVE-2024-200136.7In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-200157.8In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege withCVE-2024-200164.4In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System executionCVE-2024-200179.8In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no CVE-2024-200189.8In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege w
CVE-2024-20005: High severity, CVSS 8.2 | Vulnix