New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-20119

NVDCIRCLENISA

EUVD-2024-17834 · Published Nov 4, 2024

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620.

Technologies

Mediatek Mt6789Mediatek Mt6781Mediatek Mt6779Mediatek Mt6765Mediatek Mt6739Mediatek Mt6768Mediatek Mt6853Mediatek Mt6883Mediatek Mt6889Google AndroidMediatek Mt6885Mediatek Mt6873Mediatek Mt6761Mediatek Mt6893Mediatek Mt6785Mediatek Mt6833Mediatek Mt8676Mediatek Mt6877Mediatek Mt6835Mediatek Mt6855

Weaknesses

CWE-787CWE-123

CVSS scores

  • v3.16.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot