CVE-2024-20058

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/May-2024	Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/May-2024	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*

OR	cpe:2.3:h:mediatek:mt6765:-:::::::*
	cpe:2.3:h:mediatek:mt6768:-:::::::*
	cpe:2.3:h:mediatek:mt6785:-:::::::*
	cpe:2.3:h:mediatek:mt6833:-:::::::*
	cpe:2.3:h:mediatek:mt6853:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6893:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt8321:-:::::::*
	cpe:2.3:h:mediatek:mt8385:-:::::::*
	cpe:2.3:h:mediatek:mt8755:-:::::::*
	cpe:2.3:h:mediatek:mt8765:-:::::::*
	cpe:2.3:h:mediatek:mt8766:-:::::::*
	cpe:2.3:h:mediatek:mt8768:-:::::::*
	cpe:2.3:h:mediatek:mt8771:-:::::::*
	cpe:2.3:h:mediatek:mt8781:-:::::::*
	cpe:2.3:h:mediatek:mt8786:-:::::::*
	cpe:2.3:h:mediatek:mt8788:-:::::::*
	cpe:2.3:h:mediatek:mt8789:-:::::::*
	cpe:2.3:h:mediatek:mt8791t:-:::::::*
	cpe:2.3:h:mediatek:mt8792:-:::::::*
	cpe:2.3:h:mediatek:mt8795t:-:::::::*
	cpe:2.3:h:mediatek:mt8796:-:::::::*
	cpe:2.3:h:mediatek:mt8797:-:::::::*
	cpe:2.3:h:mediatek:mt8798:-:::::::*

History

No history.

Information

Published : 2024-05-06 03:15

Updated : 2025-04-30 16:40

NVD link : CVE-2024-20058

Mitre link : CVE-2024-20058

CVE.ORG link : CVE-2024-20058

JSON object : View

Products Affected

mediatek

mt8781
mt8795t
mt6833
mt6855
mt8791t
mt8321
mt6785
mt6768
mt6893
mt8755
mt8798
mt8789
mt8786
mt8797
mt6853
mt8385
mt6765
mt8792
mt8766
mt8765
mt8771
mt6983
mt8788
mt8768
mt8796

google

android

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2024-20058", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.8}]}, "published": "2024-05-06T03:15:09.710", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/May-2024", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://corp.mediatek.com/product-security-bulletin/May-2024", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-125"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204."}, {"lang": "es", "value": "En keyInstall, existe una posible lectura fuera de los l\u00edmites debido a una verificaci\u00f3n de los l\u00edmites faltantes. Esto podr\u00eda conducir a la divulgaci\u00f3n de informaci\u00f3n local con privilegios de ejecuci\u00f3n de System necesarios. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS08580204; ID del problema: ALPS08580204."}], "lastModified": "2025-04-30T16:40:01.383", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"}, {"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"}, {"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"}, {"criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F"}, {"criteria": "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A82E0A4F-072F-474C-B94C-8114ABE05639"}, {"criteria": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9814939B-F05E-4870-90C0-7C0F6BAAEB39"}, {"criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB"}, {"criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"}, {"criteria": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "213B5C7F-D965-4312-9CDF-4F06FA77D401"}, {"criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"}, {"criteria": "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "793B7F88-79E7-4031-8AD0-35C9BFD073C4"}, {"criteria": "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "299378ED-41CE-4966-99B1-65D2BA1215EF"}, {"criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F"}, {"criteria": "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AACF35D-27E0-49AF-A667-13585C8B8071"}, {"criteria": "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE45F606-2E75-48BC-9D1B-99D504974CBF"}, {"criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"}, {"criteria": "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0D09F23D-D023-4A60-B426-61251FDD8A5A"}, {"criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41"}, {"criteria": "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"}, {"criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220"}, {"criteria": "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1505AD53-987E-4328-8E1D-F5F1EC12B677"}, {"criteria": "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1BB05B1D-77C9-4E42-91AD-9F087413DC20"}, {"criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52"}, {"criteria": "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"}, {"criteria": "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"}, {"criteria": "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2B469BF4-5961-42E9-814B-1BE06D182E45"}, {"criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}