CVE-2024-20122

Published Nov 4, 2024

Last updated 12 days ago

CVSS medium 4.4

Overview

Description: In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572.
Source: security@mediatek.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 4.4
Impact score: 3.6
Exploitability score: 0.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

security@mediatek.com: CWE-125

Hype score: Not currently trending

CVE-2024-20122 Out of Bounds Read Leading to Local Disclosure in vdec In vdec, there's a risk of reading beyond bounds because of poor structure design. This might cause local information disclosure. System execu... https://t.co/6sSBlfELVQ
@VulmonFeeds
4 Nov 2024
16 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References