CVE-2024-20117 — MediaTek, Inc. / MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789

CVE-2024-20117

MediaTek, Inc. / MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 PUBLISHED

Description (CNA)

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789	affected Android 12.0

CWE

CWE-125

References

https://corp.mediatek.com/product-security-bulletin/November-2024

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.