CVEvulnerability
CVE-2024-20045
2.3 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2024-04-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-125
Description
In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08024748; Issue ID: ALPS08029526.
Affected configurations
• google android 12.0
• google android 13.0
• google android 14.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://corp.mediatek.com/product-security-bulletin/April-2024 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/April-2024 Vendor Advisory