CVE-2024-20016
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 0.8 / Impact: 3.6
Source: NVD
Description
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Issue ID: ALPS07835901.
Affected (4)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0 |
| Running on/with | Platform Versions |
|---|---|
Mediatek Mt6735 | All versions |
Mediatek Mt6737 | All versions |
Mediatek Mt6739 | All versions |
Mediatek Mt6753 | All versions |
Mediatek Mt6757 | All versions |
Mediatek Mt6761 | All versions |
Mediatek Mt6763 | All versions |
Mediatek Mt6765 | All versions |
Mediatek Mt6768 | All versions |
Mediatek Mt6771 | All versions |
Mediatek Mt6779 | All versions |
Mediatek Mt6781 | All versions |
Mediatek Mt6785 | All versions |
Mediatek Mt6833 | All versions |
Mediatek Mt6853 | All versions |
Mediatek Mt6855 | All versions |
Mediatek Mt6873 | All versions |
Mediatek Mt6877 | All versions |
Mediatek Mt6879 | All versions |
Mediatek Mt6885 | All versions |
Mediatek Mt6889 | All versions |
Mediatek Mt6893 | All versions |
Mediatek Mt6895 | All versions |
Mediatek Mt6983 | All versions |
Mediatek Mt8168 | All versions |
Mediatek Mt8183 | All versions |
Mediatek Mt8188 | All versions |
Mediatek Mt8195 | All versions |
Mediatek Mt8765 | All versions |
Mediatek Mt8766 | All versions |
Mediatek Mt8768 | All versions |
Mediatek Mt8791 | All versions |
Mediatek Mt8797 | All versions |
Mediatek Mt8798 | All versions |
Related CWEs
CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can
produce an integer overflow or wraparound when the logic
assumes that the resulting value will always be larger than
the original value. This occurs when an integer value is
incremented to a value that is too large to store in the
associated representation. When this occurs, the value may
become a very small or negative number.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
References (2)
Source: security@mediatek.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.