CVE-2024-20055

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-20055
In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://corp.mediatek.com/product-security-bulletin/April-2024 Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/April-2024 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:iot_yocto:23.2:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*
History

23 Apr 2025, 13:46

Type Values Removed Values Added
CPE cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:iot_yocto:23.2:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*
First Time Mediatek
Mediatek mt8798
Mediatek mt8175
Mediatek mt8795t
Mediatek mt8195
Mediatek mt8390
Mediatek mt8168
Google android
Mediatek mt8871
Mediatek mt8781
Mediatek mt2713
Mediatek mt8370
Mediatek mt8173
Google
Linuxfoundation
Linuxfoundation yocto
Mediatek iot Yocto
Mediatek mt8365
Mediatek mt8673
Mediatek mt8188
Mediatek mt8696
Mediatek mt8395
References () https://corp.mediatek.com/product-security-bulletin/April-2024 - () https://corp.mediatek.com/product-security-bulletin/April-2024 - Vendor Advisory

26 Mar 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.3
CWE CWE-125

21 Nov 2024, 08:51

Type Values Removed Values Added
References () https://corp.mediatek.com/product-security-bulletin/April-2024 - () https://corp.mediatek.com/product-security-bulletin/April-2024 -
Summary
  • (es) En imgsys, existe una posible divulgación de información debido a una verificación de los límites faltantes. Esto podría conducir a la divulgación de información local con privilegios de ejecución de System necesarios. Se necesita la interacción del usuario para la explotación ID del parche: ALPS08518692; ID del problema: MSV-1012.

01 Apr 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-01 03:15

Updated : 2025-04-23 13:46

NVD link : CVE-2024-20055

Mitre link : CVE-2024-20055

CVE.ORG link : CVE-2024-20055

JSON object : View

Products Affected

mediatek

  • mt8673
  • mt2713
  • mt8365
  • mt8798
  • mt8195
  • mt8390
  • iot_yocto
  • mt8795t
  • mt8168
  • mt8188
  • mt8395
  • mt8696
  • mt8173
  • mt8781
  • mt8871
  • mt8175
  • mt8370

linuxfoundation

  • yocto

google

  • android
CWE
CWE-125

Out-of-bounds Read