New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-20105

NVDCIRCLENISA

EUVD-2024-17820 · Published Jan 6, 2025

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09062027; Issue ID: MSV-1743.

Technologies

Mediatek Mt6789Mediatek Mt6781Mediatek Mt6779Mediatek Mt8667Mediatek Mt6765Mediatek Mt6739Mediatek Mt6768Mediatek Mt8673Mediatek Mt6853Mediatek Mt6883Mediatek Mt6889Google AndroidMediatek Mt6895Mediatek Mt6885Mediatek Mt6873Mediatek Mt6761Mediatek Mt6580Mediatek Mt6893Mediatek Mt6785Mediatek Mt6833Mediatek Mt6983Mediatek Mt8666Mediatek Mt6877Mediatek Mt6879Mediatek Mt6855Mediatek Mt8768

Weaknesses

CWE-787

CVSS scores

  • v3.16.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot