ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-20009
8.8высокая

CVE-2024-20009

Описание

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150.

Затрагиваемое ПО
Google AndroidMediatek Mt6580Mediatek Mt6739Mediatek Mt6761Mediatek Mt6762Mediatek Mt6765Mediatek Mt6779Mediatek Mt6785Mediatek Mt6789Mediatek Mt6833Mediatek Mt6835Mediatek Mt6853Mediatek Mt6853tMediatek Mt6855Mediatek Mt6873Mediatek Mt6877Mediatek Mt6879Mediatek Mt6883Mediatek Mt6885Mediatek Mt6886Mediatek Mt6889Mediatek Mt6895Mediatek Mt6983Mediatek Mt6985Mediatek Mt8163
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://corp.mediatek.com/product-security-bulletin/February-2024https://corp.mediatek.com/product-security-bulletin/February-2024