CVE-2024-20104

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09073261; Issue ID: MSV-1772.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
MediaTek, Inc.MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8370, MT8390, MT8676Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1
mediatekmt6781<= *
mediatekmt6789<= *
mediatekmt6835<= *
mediatekmt6855<= *
mediatekmt6878<= *
mediatekmt6879<= *
mediatekmt6880<= *
mediatekmt6886<= *
mediatekmt6890<= *
mediatekmt6895<= *
mediatekmt6897<= *
mediatekmt6980<= *
mediatekmt6983<= *
mediatekmt6985<= *
mediatekmt6989<= *
mediatekmt6990<= *
mediatekmt8188<= *
mediatekmt8370<= *
mediatekmt8390<= *
mediatekmt8676<= *
googleandroid12.0; 13.0; 15.0
openwrtopenwrt19.07.0; 21.02; 23.05

References

Timeline

Published
Nov 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-201056.7In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicioCVE-2024-201066.7In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201076.2In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additioCVE-2024-201086.7In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2024-201096.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-20119.8A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but canCVE-2024-201106.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201116.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201124.4In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System executiCVE-2024-201136.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201146.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201156.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System