GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-20048 (GCVE-0-2024-20048)

Vulnerability from cvelistv5 – Published: 2024-04-01 02:35 – Updated: 2024-08-01 21:52
VLAI
Summary
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541769; Issue ID: ALPS08541769.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-21 19:21 UTC
CWE
  • Information Disclosure
  • CWE-248 - Uncaught Exception
Impacted products
Vendor Product Version CPE status
MediaTek, Inc. MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798 Affected: Android 12.0, 13.0
guessed Create a notification for this product.
mediatek mt2713 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6781 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6789 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6835 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6855 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6879 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6886 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6895 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6983 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6985 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt6989 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8167 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8168 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8173 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8175 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8188 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8195 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8321 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8362a Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*
Create a notification for this product.
mediatek mt8365 Affected: android_12.0 , ≤ android_13.0 (custom)
    cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt2713",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6781",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6789",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6835",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6855",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6879",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6886",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6895",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6983",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6985",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6989",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8167",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8168",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8173",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8175",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8188",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8195",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8321",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8362a",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8365",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "android_13.0",
                "status": "affected",
                "version": "android_12.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 6.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-20048",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T19:21:04.306727Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-248",
                "description": "CWE-248 Uncaught Exception",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:40:50.765Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:52:31.769Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0, 13.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541769; Issue ID: ALPS08541769."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-01T02:35:09.283Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2024-20048",
    "datePublished": "2024-04-01T02:35:09.283Z",
    "dateReserved": "2023-11-02T13:35:35.158Z",
    "dateUpdated": "2024-08-01T21:52:31.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-20048",
      "date": "2026-09-20",
      "epss": "0.00105",
      "percentile": "0.01189"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798",
                "vendor": "MediaTek, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Android 12.0, 13.0"
                  }
                ]
              }
            ],
            "source": "security@mediatek.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt2713",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6781",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6789",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6835",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6855",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6879",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6886",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6895",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6983",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6985",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6989",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8167",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8168",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8173",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8175",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8188",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8195",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8321",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8362a",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8365",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D1135F9-E38C-4308-BD32-A4D83959282E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4EEE021-6B2A-47A0-AC6B-55525A40D718",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B5FE245-6346-4078-A3D0-E5F79BB636B8",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3CE2FC35-716A-4706-97BA-5DB165041580",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4452EFCF-5733-40A0-8726-F8E33E569411",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "582F1041-CD84-4763-AD6F-E08DD11F689F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BA3D4A45-38EE-4125-AE67-89D1C707F95A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "793B7F88-79E7-4031-8AD0-35C9BFD073C4",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "299378ED-41CE-4966-99B1-65D2BA1215EF",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B774B7D7-B7DD-43A0-833F-7E39DF82CA60",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FE14B46-C1CA-465F-8578-059FA2ED30EB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "152F6606-FA23-4530-AA07-419866B74CB3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3AACF35D-27E0-49AF-A667-13585C8B8071",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CE45F606-2E75-48BC-9D1B-99D504974CBF",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1505AD53-987E-4328-8E1D-F5F1EC12B677",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9CD2C3EC-B62D-4616-964F-FDBE5B14A449",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1BB05B1D-77C9-4E42-91AD-9F087413DC20",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2B469BF4-5961-42E9-814B-1BE06D182E45",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541769; Issue ID: ALPS08541769."
          },
          {
            "lang": "es",
            "value": "En flashc, existe una posible divulgaci\u00f3n de informaci\u00f3n debido a una excepci\u00f3n no detectada. Esto podr\u00eda conducir a la divulgaci\u00f3n de informaci\u00f3n local con privilegios de ejecuci\u00f3n de System necesarios. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS08541757; ID del problema: ALPS08541757."
          }
        ],
        "id": "CVE-2024-20048",
        "lastModified": "2026-06-17T07:05:46.343",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.5,
              "impactScore": 3.6,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-20048",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T19:21:04.306727Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-04-01T03:15:08.280",
        "references": [
          {
            "source": "security@mediatek.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
          }
        ],
        "sourceIdentifier": "security@mediatek.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-248"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:15:12+00:00",
      "cve": "CVE-2024-20048",
      "id": "CVE-2024-20048",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-20048",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-20048.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T21:52:31.769Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt2713",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6781",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6789",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6835",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6855",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6879",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6886",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6895",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6983",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6985",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt6989",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8167",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8168",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8173",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8175",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8188",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8195",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8321",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8362a",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "mt8365",
                "vendor": "mediatek",
                "versions": [
                  {
                    "lessThanOrEqual": "android_13.0",
                    "status": "affected",
                    "version": "android_12.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "NONE",
                  "baseScore": 6.2,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-20048",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-05-21T19:21:04.306727Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-248",
                    "description": "CWE-248 Uncaught Exception",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-21T18:53:59.589Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "MT2713, MT6781, MT6789, MT6835, MT6855, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8167, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "Android 12.0, 13.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541769; Issue ID: ALPS08541769."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Information Disclosure",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-04-01T02:35:09.283Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2024-20048",
        "datePublished": "2024-04-01T02:35:09.283Z",
        "dateReserved": "2023-11-02T13:35:35.158Z",
        "dateUpdated": "2024-08-01T21:52:31.769Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…