by Kastro
Paper/Archive/CVE-2024-20080

CVE-2024-20080

MediaTek, Inc. MT2735, MT2737, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8666, MT8667, MT8673, MT8676, MT8678 — In gnss service, there is a possible escalation of privilege due to improper certificate validation.

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 21.1.211 × 204.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424.

Affected

ProductAffectedFixed inSource
MT2735, MT2737, MT6761, MT6765, MT6768, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8666, MT8667, MT8673, MT8676, MT8678Android 13.0, 14.0 / Yocto 2.6, 3.3, 4.0 / RDK-B 22Q3–CNA
mt2735-–CISA-ADP
mt2737-–CISA-ADP
mt6761-–CISA-ADP
mt6765-–CISA-ADP
mt6768-–CISA-ADP
mt6781-–CISA-ADP
mt6785-–CISA-ADP
mt6789-–CISA-ADP
mt6833-–CISA-ADP
mt6853-–CISA-ADP
mt6853t-–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcorp.mediatek.com/product-security-bulletin/July-2024