CVE-2024-20011

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/February-2024	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:11.0:::::::*
	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*

OR	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt8127:-:::::::*
	cpe:2.3:h:mediatek:mt8135:-:::::::*
	cpe:2.3:h:mediatek:mt8167:-:::::::*
	cpe:2.3:h:mediatek:mt8167s:-:::::::*
	cpe:2.3:h:mediatek:mt8168:-:::::::*
	cpe:2.3:h:mediatek:mt8173:-:::::::*
	cpe:2.3:h:mediatek:mt8175:-:::::::*
	cpe:2.3:h:mediatek:mt8176:-:::::::*
	cpe:2.3:h:mediatek:mt8183:-:::::::*
	cpe:2.3:h:mediatek:mt8185:-:::::::*
	cpe:2.3:h:mediatek:mt8188:-:::::::*
	cpe:2.3:h:mediatek:mt8188t:-:::::::*
	cpe:2.3:h:mediatek:mt8195:-:::::::*
	cpe:2.3:h:mediatek:mt8195z:-:::::::*
	cpe:2.3:h:mediatek:mt8312c:-:::::::*
	cpe:2.3:h:mediatek:mt8312d:-:::::::*

History

No history.

Information

Published : 2024-02-05 06:15

Updated : 2024-02-09 02:06

NVD link : CVE-2024-20011

Mitre link : CVE-2024-20011

CVE.ORG link : CVE-2024-20011

JSON object : View

Products Affected

mediatek

mt6985
mt8195
mt8167
mt8195z
mt8175
mt8176
mt8168
mt8188
mt8167s
mt8312c
mt8312d
mt8188t
mt8135
mt8185
mt8173
mt8127
mt8183

google

android

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2024-20011", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-02-05T06:15:47.447", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/February-2024", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146."}, {"lang": "es", "value": "En el decodificador alac, existe una posible divulgaci\u00f3n de informaci\u00f3n debido a una verificaci\u00f3n de los l\u00edmites incorrecta. Esto podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS08441146; ID del problema: ALPS08441146."}], "lastModified": "2024-02-09T02:06:03.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"}, {"criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"}, {"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"}, {"criteria": "cpe:2.3:h:mediatek:mt8127:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD7BDC63-3963-4C4D-B547-2936006926E9"}, {"criteria": "cpe:2.3:h:mediatek:mt8135:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "182A995C-2453-4DF2-ABCC-A885D8C334C0"}, {"criteria": "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B5FE245-6346-4078-A3D0-E5F79BB636B8"}, {"criteria": "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "639C5BDE-2E83-427A-BAB7-85EA9348AC68"}, {"criteria": "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3CE2FC35-716A-4706-97BA-5DB165041580"}, {"criteria": "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4452EFCF-5733-40A0-8726-F8E33E569411"}, {"criteria": "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "582F1041-CD84-4763-AD6F-E08DD11F689F"}, {"criteria": "cpe:2.3:h:mediatek:mt8176:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1E5B22E8-3536-4DBC-8E71-3E14FE45A887"}, {"criteria": "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23F65D7B-31A1-4D94-82E9-254A7A6D7BE1"}, {"criteria": "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"}, {"criteria": "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA3D4A45-38EE-4125-AE67-89D1C707F95A"}, {"criteria": "cpe:2.3:h:mediatek:mt8188t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A4675A09-0147-4690-8AA1-E3802CA1B3EB"}, {"criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6"}, {"criteria": "cpe:2.3:h:mediatek:mt8195z:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9B3A37B9-F500-4B3C-B77C-B2BD7B015154"}, {"criteria": "cpe:2.3:h:mediatek:mt8312c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39915BEC-73D4-46B7-B52C-CED910AF3CA9"}, {"criteria": "cpe:2.3:h:mediatek:mt8312d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3EF828C6-4B05-4E12-9B78-782F1F062F39"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}