CVE-2024-20032

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
MediaTek, Inc.MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT6989, Android 12.0, 13.0, 14.0
mediatekmt6580<= *
mediatekmt6739<= *
mediatekmt6761<= *
mediatekmt6765<= *
mediatekmt6768<= *
mediatekmt6779<= *
mediatekmt6781<= *
mediatekmt6785<= *
mediatekmt6789<= *
mediatekmt6833<= *
mediatekmt6835<= *
mediatekmt6853<= *
mediatekmt6855<= *
mediatekmt6873<= *
mediatekmt6877<= *
mediatekmt6879<= *
mediatekmt6883<= *
mediatekmt6885<= *
mediatekmt6886<= *
mediatekmt6889<= *
mediatekmt6893<= *
mediatekmt6895<= *
mediatekmt6983<= *
mediatekmt6985<= *
mediatekmt6989<= *
mediatekmt8321<= *
mediatekmt8673<= *
mediatekmt8765<= *
mediatekmt8766<= *
mediatekmt8768<= *
mediatekmt8781<= *
mediatekmt8789<= *
mediatekmt8791<= *
mediatekmt8792<= *
mediatekmt8796<= *

References

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-200334.4In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with SysCVE-2024-200347.2In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege withCVE-2024-200364.4In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execCVE-2024-200376.7In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2024-200383.4In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System CVE-2024-200398.8In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no aCVE-2024-20043.5When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the aCVE-2024-200408.8In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilegCVE-2024-200414.4In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System exeCVE-2024-200426.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200436.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200446.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System e
CVE-2024-20032: Medium severity, CVSS 6.7 | Vulnix