Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-20122 EUVD-2024-17837GHSA-pxqj-m825-g6fc

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with Syst…

Published Nov 4, 2024 · Updated Nov 4, 2024 · Assigned by MediaTek

Description

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572.

Affected products

VendorProductAffectedFixed
MediaTek MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 Android 12.0 —

References