Vulnerability

CVE-2024-20130

Component: POWER
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

N/A

Severity (Android)

N/A

Chipsets

38

Devices

638

Affected Hardware

NameAlso known asManufacturer
MT6739
MediaTek
MT6765
Helio P35
MediaTek
MT6768
Helio P65
MediaTek
MT6781
Helio G96
MediaTek
MT6789
Helio G99
MediaTek
MT6833
Dimensity 6020
Dimensity 700
MediaTek
MT6833
Dimensity 6080
Dimensity 810
MediaTek
MT6877
Dimensity 900
MediaTek
MT6877
Dimensity 920
MediaTek
MT6855
Dimensity 930
MediaTek
38 of 38 row(s) shown.

Rows per page

Page 1 of 4

Timeline

Introduced (est):
Oct 1, 2017
Reported:
Unknown
Advisory Published:
Dec 2, 2024
CVE Published:
N/A
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter