Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

gnss service

Source

security@mediatek.com

CVE-2024-20079 details

Published : July 1, 2024, 5:15 a.m.
Last Modified : July 1, 2024, 12:37 p.m.

Description

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: MSV-1491.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-787	Out-of-bounds Write	The product writes data past the end, or before the beginning, of the intended buffer.

References

URL	Source
https://corp.mediatek.com/product-security-bulletin/July-2024	security@mediatek.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-20079