Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-20037 EUVD-2024-17752GHSA-x8xc-vcqw-36qc

In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege wi…

Published Mar 4, 2024 · Updated Aug 22, 2024 · Assigned by MediaTek

Description

In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; Issue ID: ALPS08495937.

Affected products

VendorProductAffectedFixed
MediaTek MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6983, MT6985 Android 12.0, 13.0, 14.0 —

References