CVE-2024-20124

No fix known EPSS <1%CVSS 4.4

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1568.

Published 2024-11-04 · CVE record · OSV

Products: MediaTek, Inc. MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789, mediatek mt6761, mediatek mt6765, mediatek mt6768, mediatek mt6779, mediatek mt6785, mediatek mt8766, mediatek mt8768, mediatek mt8789, Google Android