CVE-2024-20119
MEDIUMDescription
In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620.
Is your site exposed to CVE-2024-20119?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| android | |
| android | |
| android | |
| android | |
| mediatek | mt6739 |
| mediatek | mt6761 |
| mediatek | mt6765 |
| mediatek | mt6768 |
| mediatek | mt6779 |
| mediatek | mt6781 |
| mediatek | mt6785 |
| mediatek | mt6789 |
| mediatek | mt6833 |
| mediatek | mt6835 |
| mediatek | mt6853 |
| mediatek | mt6855 |
| mediatek | mt6873 |
| mediatek | mt6877 |
| mediatek | mt6883 |
| mediatek | mt6885 |
| mediatek | mt6889 |
| mediatek | mt6893 |
| mediatek | mt8676 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-20119? +
How severe is CVE-2024-20119? +
What products are affected by CVE-2024-20119? +
How do I check if I'm vulnerable to CVE-2024-20119? +
Related Vulnerabilities
llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. …
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted …
vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memory …
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES …
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have …