CVE-2024-20133

EUVD-2024-17848
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
mediateknr16
-
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mediatekmt6879
𝑥
≤ *
ADP
mediatekmt6886
𝑥
≤ *
ADP
mediatekmt6895
𝑥
≤ *
ADP
mediatekmt6895t
𝑥
≤ *
ADP
mediatekmt6896
𝑥
≤ *
ADP
mediatekmt6980
𝑥
≤ *
ADP
mediatekmt6983
𝑥
≤ *
ADP
mediatekmt8673
𝑥
≤ *
ADP
mediatekmt8676
𝑥
≤ *
ADP
mediatekmt8795t
𝑥
≤ *
ADP
mediatekmt8798
𝑥
≤ *
ADP
Common Weakness Enumeration
References
https://corp.mediatek.com/product-security-bulletin/December-2024