Vulnerability-Lookup

CVE-2024-20090 (GCVE-0-2024-20090)

Vulnerability from cvelistv5 – Published: 2024-10-07 02:35 – Updated: 2024-10-07 14:05

Summary

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-787 - Out-of-bounds Write

Assigner

MediaTek

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…

Impacted products

18 products

Vendor	Product	Version
MediaTek, Inc.	MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788, MT8789	Affected: Android 12.0
mediatek	mt6761	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6761:-:::::::*
mediatek	mt6765	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6765:-:::::::*
mediatek	mt6768	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6768:-:::::::*
mediatek	mt6779	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6779:-:::::::*
mediatek	mt6785	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6785:-:::::::*
mediatek	mt6853	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6853:-:::::::*
mediatek	mt6873	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6873:-:::::::*
mediatek	mt6885	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt6885:-:::::::*
mediatek	mt8385	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8385:-:::::::*
mediatek	mt8666	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8666:-:::::::*
mediatek	mt8667	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8667:-:::::::*
mediatek	mt8766	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8766:-:::::::*
mediatek	mt8768	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8768:-:::::::*
mediatek	mt8781	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8781:-:::::::*
mediatek	mt8788	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8788:-:::::::*
mediatek	mt8789	Affected: 0 , ≤ * (custom) cpe:2.3:h:mediatek:mt8789:-:::::::*
google	android	Affected: 12.0 cpe:2.3:o:google:android:12.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6761",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6765",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6768",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6779",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6785",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6853",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6873",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6885",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8385",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8666",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8667",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8766",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8768",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8781",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8788",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8789",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "status": "affected",
                "version": "12.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-20090",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T14:04:38.748567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T14:05:24.427Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788, MT8789",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-07T02:35:05.952Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/October-2024"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2024-20090",
    "datePublished": "2024-10-07T02:35:05.952Z",
    "dateReserved": "2023-11-02T13:35:35.174Z",
    "dateUpdated": "2024-10-07T14:05:24.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-20090",
      "date": "2026-07-13",
      "epss": "0.00088",
      "percentile": "0.00488"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-20090\",\"sourceIdentifier\":\"security@mediatek.com\",\"published\":\"2024-10-07T03:15:02.430\",\"lastModified\":\"2026-06-17T07:05:54.203\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.\"},{\"lang\":\"es\",\"value\":\"En vdec, existe una posible escritura fuera de los l\u00edmites debido a una verificaci\u00f3n de los l\u00edmites faltante. Esto podr\u00eda provocar una escalada local de privilegios, siendo necesarios los permisos de ejecuci\u00f3n de System. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS09028313; ID de problema: MSV-1703.\"}],\"affected\":[{\"source\":\"security@mediatek.com\",\"affectedData\":[{\"vendor\":\"MediaTek, Inc.\",\"product\":\"MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788, MT8789\",\"versions\":[{\"version\":\"Android 12.0\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"mediatek\",\"product\":\"mt6761\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6765\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6768\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6779\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6785\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6853\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6873\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt6885\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8385\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8666\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8667\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8766\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8768\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8781\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8788\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"mediatek\",\"product\":\"mt8789\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"google\",\"product\":\"android\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"12.0\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-07T14:04:38.748567Z\",\"id\":\"CVE-2024-20090\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security@mediatek.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8FB8EE9-FC56-4D5E-AE55-A5967634740C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F726F486-A86F-4215-AD93-7A07A071844A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"43E779F6-F0A0-4153-9A1D-B715C3A2F80E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06CD97E1-8A76-48B4-9780-9698EF5A960F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBA369B8-8E23-492B-82CC-23114E6A5D1C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A82E0A4F-072F-474C-B94C-8114ABE05639\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"366F1912-756B-443E-9962-224937DD7DFB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD64413C-C774-4C4F-9551-89E1AA9469EE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"299378ED-41CE-4966-99B1-65D2BA1215EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FE14B46-C1CA-465F-8578-059FA2ED30EB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE45F606-2E75-48BC-9D1B-99D504974CBF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"533284E5-C3AF-48D3-A287-993099DB2E41\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE10C121-F2AD-43D2-8FF9-A6C197858220\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1505AD53-987E-4328-8E1D-F5F1EC12B677\"}]}]}],\"references\":[{\"url\":\"https://corp.mediatek.com/product-security-bulletin/October-2024\",\"source\":\"security@mediatek.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:25:11+00:00",
      "cve": "CVE-2024-20090",
      "id": "CVE-2024-20090",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-20090",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-20090.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.7, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20090\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-07T14:04:38.748567Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6761\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6765\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6768\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6779\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6785\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6853\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6873\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt6885\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8385\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8666\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8667\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8766\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8768\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8781\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8788\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*\"], \"vendor\": \"mediatek\", \"product\": \"mt8789\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"*\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*\"], \"vendor\": \"google\", \"product\": \"android\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.0\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-07T14:04:34.154Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"MediaTek, Inc.\", \"product\": \"MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788, MT8789\", \"versions\": [{\"status\": \"affected\", \"version\": \"Android 12.0\"}]}], \"references\": [{\"url\": \"https://corp.mediatek.com/product-security-bulletin/October-2024\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"shortName\": \"MediaTek\", \"dateUpdated\": \"2024-10-07T02:35:05.952Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-20090\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-07T14:05:24.427Z\", \"dateReserved\": \"2023-11-02T13:35:35.174Z\", \"assignerOrgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"datePublished\": \"2024-10-07T02:35:05.952Z\", \"assignerShortName\": \"MediaTek\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-0874

Vulnerability from certfr_avis - Published: 2024-10-11 - Updated: 2024-10-11

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	N/A	Android versions antérieures à 12, 12L, 13, 14 et 15 avant le correctif du 07 octobre 2024

References

Title

Publication Time

FKIE_CVE-2024-20090

Vulnerability from fkie_nvd - Published: 2024-10-07 03:15 - Updated: 2026-06-17 07:05

Severity

6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security@mediatek.com	https://corp.mediatek.com/product-security-bulletin/October-2024	Vendor Advisory

Impacted products

Vendor	Product	Version
google	android	12.0
mediatek	mt6761	-
mediatek	mt6765	-
mediatek	mt6768	-
mediatek	mt6779	-
mediatek	mt6785	-
mediatek	mt6853	-
mediatek	mt6873	-
mediatek	mt6885	-
mediatek	mt8385	-
mediatek	mt8666	-
mediatek	mt8667	-
mediatek	mt8766	-
mediatek	mt8768	-
mediatek	mt8781	-
mediatek	mt8788	-
mediatek	mt8789	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8385, MT8666, MT8667, MT8766, MT8768, MT8781, MT8788, MT8789",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0"
            }
          ]
        }
      ],
      "source": "security@mediatek.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6761",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6765",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6768",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6779",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6785",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6853",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6873",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt6885",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8385",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8666",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8667",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8766",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8768",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8781",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8788",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "mt8789",
          "vendor": "mediatek",
          "versions": [
            {
              "lessThanOrEqual": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "android",
          "vendor": "google",
          "versions": [
            {
              "status": "affected",
              "version": "12.0"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F726F486-A86F-4215-AD93-7A07A071844A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "43E779F6-F0A0-4153-9A1D-B715C3A2F80E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBA369B8-8E23-492B-82CC-23114E6A5D1C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A82E0A4F-072F-474C-B94C-8114ABE05639",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD64413C-C774-4C4F-9551-89E1AA9469EE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "299378ED-41CE-4966-99B1-65D2BA1215EF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FE14B46-C1CA-465F-8578-059FA2ED30EB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE45F606-2E75-48BC-9D1B-99D504974CBF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1505AD53-987E-4328-8E1D-F5F1EC12B677",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703."
    },
    {
      "lang": "es",
      "value": "En vdec, existe una posible escritura fuera de los l\u00edmites debido a una verificaci\u00f3n de los l\u00edmites faltante. Esto podr\u00eda provocar una escalada local de privilegios, siendo necesarios los permisos de ejecuci\u00f3n de System. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS09028313; ID de problema: MSV-1703."
    }
  ],
  "id": "CVE-2024-20090",
  "lastModified": "2026-06-17T07:05:54.203",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-20090",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-10-07T14:04:38.748567Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-10-07T03:15:02.430",
  "references": [
    {
      "source": "security@mediatek.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://corp.mediatek.com/product-security-bulletin/October-2024"
    }
  ],
  "sourceIdentifier": "security@mediatek.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "security@mediatek.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-76Q6-3R42-2MJ6

Vulnerability from github – Published: 2024-10-07 03:30 – Updated: 2024-10-07 21:33

Details

Severity

6.7 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-20090"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-10-07T03:15:02Z",
    "severity": "MODERATE"
  },
  "details": "In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.",
  "id": "GHSA-76q6-3r42-2mj6",
  "modified": "2024-10-07T21:33:30Z",
  "published": "2024-10-07T03:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20090"
    },
    {
      "type": "WEB",
      "url": "https://corp.mediatek.com/product-security-bulletin/October-2024"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-20090

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-20090

Aliases

CVE-2024-20090

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2024-20090",
    "id": "GSD-2024-20090"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-20090"
      ],
      "id": "GSD-2024-20090",
      "modified": "2023-12-13T01:21:42.910988Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-20090",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

NCSC-2024-0391

Vulnerability from csaf_ncscnl - Published: 2024-10-08 13:55 - Updated: 2024-10-08 13:55

Summary

Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zichzelf verhoogde rechten toe te kennen of willekeurige code uit te voeren. De ernstigste kwetsbaarheid heeft kenmerk CVE-2024-40673 toegewezen gekregen en bevindt zich in de kernel van Android. Deze kwetsbaarheid stelt een kwaadwillende in staat om willekeurige code uit te voeren op het systeem. Google heeft verder, zoals gebruikelijk, weinig detailinformatie beschikbaar gesteld.

Oplossingen: Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12,13 en 14. Samsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-126: Buffer Over-read

CWE-617: Reachable Assertion

CWE-125: Out-of-bounds Read

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416: Use After Free

CWE-787: Out-of-bounds Write

CWE-562: Return of Stack Variable Address

CWE-310: CWE-310

CWE-822: Untrusted Pointer Dereference

CWE-754: Improper Check for Unusual or Exceptional Conditions

CWE-680: Integer Overflow to Buffer Overflow

CWE-190: Integer Overflow or Wraparound

CWE-284: Improper Access Control

CWE-476: NULL Pointer Dereference

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-20: Improper Input Validation

CVE-2024-0044

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Known affected 5 products

Product	Identifier	Version
android google	`cpe:2.3:o:google:android::::::::`	—
android google	`cpe:2.3:a:google:android:14:::::::*`	—
android google	`cpe:2.3:a:google:android:13:::::::*`	—
android google	`cpe:2.3:a:google:android:12l:::::::*`	—
android google	`cpe:2.3:a:google:android:12:::::::*`	—

CVE-2024-20090

CWE-787 - Out-of-bounds Write

CVE-2024-20091

CWE-125 - Out-of-bounds Read

CVE-2024-20092

CWE-787 - Out-of-bounds Write

CVE-2024-20093

CWE-125 - Out-of-bounds Read

CVE-2024-20094

CWE-617 - Reachable Assertion

CVE-2024-20100

CWE-787 - Out-of-bounds Write

CVE-2024-20101

CWE-787 - Out-of-bounds Write

CVE-2024-20103

CWE-787 - Out-of-bounds Write

CVE-2024-23369

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-33049

CWE-126 - Buffer Over-read

CVE-2024-33069

CWE-416 - Use After Free

CVE-2024-34732

CVE-2024-34733

CVE-2024-34748

CVE-2024-38399

CWE-416 - Use After Free

CVE-2024-40649

CVE-2024-40651

CVE-2024-40669

CVE-2024-40670

CVE-2024-40672

CVE-2024-40673

CVE-2024-40674

CVE-2024-40675

CVE-2024-40676

CVE-2024-40677

CVE-2024-34662

CWE-284 - Improper Access Control

CVE-2024-34663

CWE-680 - Integer Overflow to Buffer Overflow

CVE-2024-34664

CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVE-2024-34665

CWE-787 - Out-of-bounds Write

CVE-2024-34666

CWE-787 - Out-of-bounds Write

CVE-2024-34667

CWE-787 - Out-of-bounds Write

CVE-2024-34668

CWE-787 - Out-of-bounds Write

CVE-2024-34669

CWE-787 - Out-of-bounds Write

References

36 references

URL	Category
https://source.android.com/docs/security/bulletin…	external
https://security.samsungmobile.com/securityUpdate…	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Google heeft kwetsbaarheden verholpen in Android.\n\nSamsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zichzelf verhoogde rechten toe te kennen of willekeurige code uit te voeren.\n\nDe ernstigste kwetsbaarheid heeft kenmerk CVE-2024-40673 toegewezen gekregen en bevindt zich in de kernel van Android. Deze kwetsbaarheid stelt een kwaadwillende in staat om willekeurige code uit te voeren op het systeem.\n\nGoogle heeft verder, zoals gebruikelijk, weinig detailinformatie beschikbaar gesteld.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12,13 en 14.\n\nSamsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices.\n\nZie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Reachable Assertion",
        "title": "CWE-617"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Return of Stack Variable Address",
        "title": "CWE-562"
      },
      {
        "category": "general",
        "text": "CWE-310",
        "title": "CWE-310"
      },
      {
        "category": "general",
        "text": "Untrusted Pointer Dereference",
        "title": "CWE-822"
      },
      {
        "category": "general",
        "text": "Improper Check for Unusual or Exceptional Conditions",
        "title": "CWE-754"
      },
      {
        "category": "general",
        "text": "Integer Overflow to Buffer Overflow",
        "title": "CWE-680"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - hkcert",
        "url": "https://source.android.com/docs/security/bulletin/2024-10-01"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2024\u0026month=10"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Google Android en Samsung Mobile",
    "tracking": {
      "current_release_date": "2024-10-08T13:55:56.095947Z",
      "id": "NCSC-2024-0391",
      "initial_release_date": "2024-10-08T13:55:56.095947Z",
      "revision_history": [
        {
          "date": "2024-10-08T13:55:56.095947Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "android",
            "product": {
              "name": "android",
              "product_id": "CSAFPID-1463888",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:google:android:12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "android",
            "product": {
              "name": "android",
              "product_id": "CSAFPID-1463887",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:google:android:12l:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "android",
            "product": {
              "name": "android",
              "product_id": "CSAFPID-1463886",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:google:android:13:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "android",
            "product": {
              "name": "android",
              "product_id": "CSAFPID-1463885",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:google:android:14:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "android",
            "product": {
              "name": "android",
              "product_id": "CSAFPID-87814",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "google"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "devices",
            "product": {
              "name": "devices",
              "product_id": "CSAFPID-868453",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:samsung:devices:*:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "samsung"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-0044",
      "product_status": {
        "known_affected": [
          "CSAFPID-87814",
          "CSAFPID-1463885",
          "CSAFPID-1463886",
          "CSAFPID-1463887",
          "CSAFPID-1463888"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-0044",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0044.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-87814",
            "CSAFPID-1463885",
            "CSAFPID-1463886",
            "CSAFPID-1463887",
            "CSAFPID-1463888"
          ]
        }
      ],
      "title": "CVE-2024-0044"
    },
    {
      "cve": "CVE-2024-20090",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20090",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20090.json"
        }
      ],
      "title": "CVE-2024-20090"
    },
    {
      "cve": "CVE-2024-20091",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20091",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20091.json"
        }
      ],
      "title": "CVE-2024-20091"
    },
    {
      "cve": "CVE-2024-20092",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20092",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20092.json"
        }
      ],
      "title": "CVE-2024-20092"
    },
    {
      "cve": "CVE-2024-20093",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20093",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20093.json"
        }
      ],
      "title": "CVE-2024-20093"
    },
    {
      "cve": "CVE-2024-20094",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "notes": [
        {
          "category": "other",
          "text": "Reachable Assertion",
          "title": "CWE-617"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20094",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20094.json"
        }
      ],
      "title": "CVE-2024-20094"
    },
    {
      "cve": "CVE-2024-20100",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20100",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20100.json"
        }
      ],
      "title": "CVE-2024-20100"
    },
    {
      "cve": "CVE-2024-20101",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20101",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20101.json"
        }
      ],
      "title": "CVE-2024-20101"
    },
    {
      "cve": "CVE-2024-20103",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-20103",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-20103.json"
        }
      ],
      "title": "CVE-2024-20103"
    },
    {
      "cve": "CVE-2024-23369",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-23369",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23369.json"
        }
      ],
      "title": "CVE-2024-23369"
    },
    {
      "cve": "CVE-2024-33049",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-33049",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33049.json"
        }
      ],
      "title": "CVE-2024-33049"
    },
    {
      "cve": "CVE-2024-33069",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-33069",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33069.json"
        }
      ],
      "title": "CVE-2024-33069"
    },
    {
      "cve": "CVE-2024-34732",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34732",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34732.json"
        }
      ],
      "title": "CVE-2024-34732"
    },
    {
      "cve": "CVE-2024-34733",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34733",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34733.json"
        }
      ],
      "title": "CVE-2024-34733"
    },
    {
      "cve": "CVE-2024-34748",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34748",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34748.json"
        }
      ],
      "title": "CVE-2024-34748"
    },
    {
      "cve": "CVE-2024-38399",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38399",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38399.json"
        }
      ],
      "title": "CVE-2024-38399"
    },
    {
      "cve": "CVE-2024-40649",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40649",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40649.json"
        }
      ],
      "title": "CVE-2024-40649"
    },
    {
      "cve": "CVE-2024-40651",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40651",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40651.json"
        }
      ],
      "title": "CVE-2024-40651"
    },
    {
      "cve": "CVE-2024-40669",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40669",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40669.json"
        }
      ],
      "title": "CVE-2024-40669"
    },
    {
      "cve": "CVE-2024-40670",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40670",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40670.json"
        }
      ],
      "title": "CVE-2024-40670"
    },
    {
      "cve": "CVE-2024-40672",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40672",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40672.json"
        }
      ],
      "title": "CVE-2024-40672"
    },
    {
      "cve": "CVE-2024-40673",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40673",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40673.json"
        }
      ],
      "title": "CVE-2024-40673"
    },
    {
      "cve": "CVE-2024-40674",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40674",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40674.json"
        }
      ],
      "title": "CVE-2024-40674"
    },
    {
      "cve": "CVE-2024-40675",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40675",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40675.json"
        }
      ],
      "title": "CVE-2024-40675"
    },
    {
      "cve": "CVE-2024-40676",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40676",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40676.json"
        }
      ],
      "title": "CVE-2024-40676"
    },
    {
      "cve": "CVE-2024-40677",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40677",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40677.json"
        }
      ],
      "title": "CVE-2024-40677"
    },
    {
      "cve": "CVE-2024-34662",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34662",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34662.json"
        }
      ],
      "title": "CVE-2024-34662"
    },
    {
      "cve": "CVE-2024-34663",
      "cwe": {
        "id": "CWE-680",
        "name": "Integer Overflow to Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow to Buffer Overflow",
          "title": "CWE-680"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34663",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34663.json"
        }
      ],
      "title": "CVE-2024-34663"
    },
    {
      "cve": "CVE-2024-34664",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Check for Unusual or Exceptional Conditions",
          "title": "CWE-754"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34664",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34664.json"
        }
      ],
      "title": "CVE-2024-34664"
    },
    {
      "cve": "CVE-2024-34665",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34665",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34665.json"
        }
      ],
      "title": "CVE-2024-34665"
    },
    {
      "cve": "CVE-2024-34666",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34666",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34666.json"
        }
      ],
      "title": "CVE-2024-34666"
    },
    {
      "cve": "CVE-2024-34667",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34667",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34667.json"
        }
      ],
      "title": "CVE-2024-34667"
    },
    {
      "cve": "CVE-2024-34668",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34668",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34668.json"
        }
      ],
      "title": "CVE-2024-34668"
    },
    {
      "cve": "CVE-2024-34669",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34669",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34669.json"
        }
      ],
      "title": "CVE-2024-34669"
    }
  ]
}

WID-SEC-W-2024-3096

Vulnerability from csaf_certbund - Published: 2024-10-07 22:00 - Updated: 2024-10-07 22:00

Summary

Android Patchday Oktober 2024: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.

Betroffene Betriebssysteme: - Android

CVE-2024-0044

In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20090

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20091

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20092

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20093

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20094

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20100

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20101

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-20103

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-23369

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-33049

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-33069

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-34732

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-34733

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-34748

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-38399

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40649

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40651

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40669

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40670

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40672

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40673

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40674

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40675

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40676

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

CVE-2024-40677

Affected products

Known affected 5 products

Product	Identifier	Version
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://source.android.com/docs/security/bulletin…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Android Betriebssystem ist eine quelloffene Plattform f\u00fcr mobile Ger\u00e4te. Die Basis bildet der Linux-Kernel.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Android",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3096 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3096.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3096 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3096"
      },
      {
        "category": "external",
        "summary": "Android Patchday October 2024  vom 2024-10-07",
        "url": "https://source.android.com/docs/security/bulletin/2024-10-01"
      }
    ],
    "source_lang": "en-US",
    "title": "Android Patchday Oktober 2024: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-10-07T22:00:00.000+00:00",
      "generator": {
        "date": "2024-10-08T08:11:30.316+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2024-3096",
      "initial_release_date": "2024-10-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-10-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "14",
                "product": {
                  "name": "Google Android 14",
                  "product_id": "T030961",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "13",
                "product": {
                  "name": "Google Android 13",
                  "product_id": "T033808",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "12",
                "product": {
                  "name": "Google Android 12",
                  "product_id": "T038019",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "12L",
                "product": {
                  "name": "Google Android 12L",
                  "product_id": "T038020",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:12l"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15",
                "product": {
                  "name": "Google Android 15",
                  "product_id": "T038021",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:15"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-0044",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-0044"
    },
    {
      "cve": "CVE-2024-20090",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20090"
    },
    {
      "cve": "CVE-2024-20091",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20091"
    },
    {
      "cve": "CVE-2024-20092",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20092"
    },
    {
      "cve": "CVE-2024-20093",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20093"
    },
    {
      "cve": "CVE-2024-20094",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20094"
    },
    {
      "cve": "CVE-2024-20100",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20100"
    },
    {
      "cve": "CVE-2024-20101",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20101"
    },
    {
      "cve": "CVE-2024-20103",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-20103"
    },
    {
      "cve": "CVE-2024-23369",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-23369"
    },
    {
      "cve": "CVE-2024-33049",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-33049"
    },
    {
      "cve": "CVE-2024-33069",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-33069"
    },
    {
      "cve": "CVE-2024-34732",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-34732"
    },
    {
      "cve": "CVE-2024-34733",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-34733"
    },
    {
      "cve": "CVE-2024-34748",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-34748"
    },
    {
      "cve": "CVE-2024-38399",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-38399"
    },
    {
      "cve": "CVE-2024-40649",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40649"
    },
    {
      "cve": "CVE-2024-40651",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40651"
    },
    {
      "cve": "CVE-2024-40669",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40669"
    },
    {
      "cve": "CVE-2024-40670",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40670"
    },
    {
      "cve": "CVE-2024-40672",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40672"
    },
    {
      "cve": "CVE-2024-40673",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40673"
    },
    {
      "cve": "CVE-2024-40674",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40674"
    },
    {
      "cve": "CVE-2024-40675",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40675"
    },
    {
      "cve": "CVE-2024-40676",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40676"
    },
    {
      "cve": "CVE-2024-40677",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android bestehen mehrere Schwachstellen. Diese Fehler existieren in mehreren Subsystemen und Komponenten wie dem Framework, dem Wifi oder den Komponenten von Mediatek und Qualcomm. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren oder einen Denial-of-Service-Zustand zu erzeugen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038020",
          "T030961",
          "T038021",
          "T038019",
          "T033808"
        ]
      },
      "release_date": "2024-10-07T22:00:00.000+00:00",
      "title": "CVE-2024-40677"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-20090 (GCVE-0-2024-20090)

CERTFR-2024-AVI-0874

Solutions

FKIE_CVE-2024-20090

GHSA-76Q6-3R42-2MJ6

GSD-2024-20090

NCSC-2024-0391

WID-SEC-W-2024-3096

Tags

Sightings

Nomenclature