CVE-2024-20112

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
MediaTek, Inc.MT6878, MT6886, MT6897, MT6985, MT8676Android 13.0, 14.0
mediatekmt6878<= *
mediatekmt6886<= *
mediatekmt6897<= *
mediatekmt6985<= *
mediatekmt8676<= *
googleandroid13.0; 14.0

References

Timeline

Published
Nov 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-201136.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201146.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201156.7In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2024-201164.4In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eCVE-2024-201174.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with SysteCVE-2024-201186.7In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2024-201196.7In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2024-20129.8vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or codCVE-2024-201206.7In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-201216.7In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-201224.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with SysteCVE-2024-201234.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with Syste
CVE-2024-20112: Medium severity, CVSS 4.4 | Vulnix