Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-20055 EUVD-2024-17770GHSA-3qcf-hphp-2m63

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with S…

Published Apr 1, 2024 · Updated Mar 26, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT2713, MT8168, MT8173, MT8175, MT8188, MT8195, MT8365, MT8370, MT8390, MT8395, MT8673, MT8696, MT8781, MT8795T, MT8798, MT8871

Description

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.

Affected products

VendorProductAffectedFixed
MediaTek MT2713, MT8168, MT8173, MT8175, MT8188, MT8195, MT8365, MT8370, MT8390, MT8395, MT8673, MT8696, MT8781, MT8795T, MT8798, MT8871 Android 12.0, 13.0 / Yocto 4.0 / IOT-v23.2 —

References