Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-20021 EUVD-2024-17736GHSA-8422-7263-3xg6

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of…

Published May 6, 2024 · Updated Aug 1, 2024 · Assigned by MediaTek

Description

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.

Affected products

VendorProductAffectedFixed
MediaTek MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, M Android 12.0, 13.0, 14.0 —

References