Skip to content
OpenAdvisories
Low · 2.3 CVE-2024-20045 EUVD-2024-17760GHSA-w3ph-2h93-f367

In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information discl…

Published Apr 1, 2024 · Updated Mar 28, 2025 · Assigned by MediaTek

Description

In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08024748; Issue ID: ALPS08029526.

Affected products

VendorProductAffectedFixed
MediaTek MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6983, MT6985, MT6989, MT8167, MT8167S, MT8168, MT8188, MT8195, MT8321, MT8385, MT87 Android 12.0, 13.0, 14.0 —

References