Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

UNKNOWN

atf spm

Source

security@mediatek.com

CVE-2024-20021 details

Published : May 6, 2024, 3:15 a.m.
Last Modified : May 6, 2024, 12:44 p.m.

Description

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://corp.mediatek.com/product-security-bulletin/May-2024	security@mediatek.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-20021