Vulnerability

CVE-2024-20022

In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.

Impact

Severity (Manufact.)

HIGH

Severity (NIST)

N/A

Severity (Android)

N/A

Chipsets

18

Devices

158

Affected Hardware

NameAlso known asManufacturer
MT6789
Helio G99
MediaTek
MT6855
Dimensity 930
MediaTek
MT6879
Dimensity 1050
MediaTek
MT6886
Dimensity 7200
MediaTek
MT6895
Dimensity 8000
MediaTek
MT6983
Dimensity 9000
MediaTek
MT6983
Dimensity 9000+
MediaTek
MT6985
Dimensity 9200
MediaTek
MT6985
Dimensity 9200+
MediaTek
MT8781
Helio G99
MediaTek
18 of 18 row(s) shown.

Rows per page

Page 1 of 2

Timeline

Introduced (est):
Oct 1, 2021
Reported:
Unknown
Advisory Published:
Mar 4, 2024
CVE Published:
Mar 4, 2024
Android Patch Level:
Mar 2024
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter