VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2024/20xxx/CVE-2024-20054.json
T

472 lines
19 KiB
JSON
Raw Blame History

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-20054",
"assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
"state": "PUBLISHED",
"assignerShortName": "MediaTek",
"dateReserved": "2023-11-02T13:35:35.160Z",
"datePublished": "2024-04-01T02:35:19.821Z",
"dateUpdated": "2024-08-01T21:52:31.766Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
"shortName": "MediaTek",
"dateUpdated": "2024-04-01T02:35:19.821Z"
},
"descriptions": [
{
"lang": "en",
"value": "In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200."
}
],
"affected": [
{
"vendor": "MediaTek, Inc.",
"product": "MT2735, MT2737, MT6762, MT6765, MT6769, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT8168, MT8173, MT8195, MT8321, MT8385, MT8390, MT8666, MT8667, MT8673, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8791T, MT8792, MT8796, MT8893",
"versions": [
{
"version": "Android 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 2.6, 3.3 / RDKB 2022Q3",
"status": "affected"
}
]
}
],
"references": [
{
"url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
}
],
"problemTypes": [
{
"descriptions": [
{
"type": "text",
"lang": "en",
"description": "Elevation of Privilege"
}
]
}
]
},
"adp": [
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.6,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2024-20054",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-05-21T20:26:30.833411Z"
}
}
}
],
"affected": [
{
"cpes": [
"cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6761",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6765",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6768",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6789",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6833",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6855",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt6895",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8167",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8168",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8188",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8321",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8765",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8766",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8768",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8781",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8786",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8788",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8789",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8791t",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8797",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*"
],
"vendor": "mediatek",
"product": "mt8798",
"versions": [
{
"status": "affected",
"version": "android_13.0",
"versionType": "custom",
"lessThanOrEqual": "android_14.0"
}
],
"defaultStatus": "unknown"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"type": "CWE",
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write"
}
]
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-06-04T17:40:32.140Z"
}
},
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T21:52:31.766Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://corp.mediatek.com/product-security-bulletin/April-2024",
"tags": [
"x_transferred"
]
}
]
}
]
}
}
View Git Blame Copy Permalink