ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2024-20127

MediaTek MT6580mediatek mt6580mediatek mt6739mediatek mt6761mediatek mt6765mediatek mt6768
CVSS 3.1
7.5بالا

شرح رسمی (انگلیسی)

In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2023.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.5بالا 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
MediaTek, Inc. MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, Android 13.0, 14.0, 15.0 CVEProject cvelistV5 (CNA)
mediatek mt6580 همه CISA ADP / Vulnrichment
mediatek mt6739 همه CISA ADP / Vulnrichment
mediatek mt6761 همه CISA ADP / Vulnrichment
mediatek mt6765 همه CISA ADP / Vulnrichment
mediatek mt6768 همه CISA ADP / Vulnrichment
mediatek mt6779 همه CISA ADP / Vulnrichment
mediatek mt6781 همه CISA ADP / Vulnrichment
mediatek mt6785 همه CISA ADP / Vulnrichment
mediatek mt6789 همه CISA ADP / Vulnrichment
mediatek mt6833 همه CISA ADP / Vulnrichment
mediatek mt6835 همه CISA ADP / Vulnrichment
mediatek mt6853 همه CISA ADP / Vulnrichment
mediatek mt6855 همه CISA ADP / Vulnrichment
mediatek mt6873 همه CISA ADP / Vulnrichment
mediatek mt6877 همه CISA ADP / Vulnrichment
mediatek mt6878 همه CISA ADP / Vulnrichment
mediatek mt6879 همه CISA ADP / Vulnrichment
mediatek mt6883 همه CISA ADP / Vulnrichment
mediatek mt6885 همه CISA ADP / Vulnrichment
mediatek mt6886 همه CISA ADP / Vulnrichment
mediatek mt6889 همه CISA ADP / Vulnrichment
mediatek mt6893 همه CISA ADP / Vulnrichment
mediatek mt6895 همه CISA ADP / Vulnrichment
mediatek mt6896 همه CISA ADP / Vulnrichment
mediatek mt6897 همه CISA ADP / Vulnrichment
mediatek mt6983 همه CISA ADP / Vulnrichment
mediatek mt6985 همه CISA ADP / Vulnrichment
mediatek mt6989 همه CISA ADP / Vulnrichment
mediatek mt8321 همه CISA ADP / Vulnrichment
mediatek mt8666 همه CISA ADP / Vulnrichment
mediatek mt8667 همه CISA ADP / Vulnrichment
mediatek mt8673 همه CISA ADP / Vulnrichment
mediatek mt8678 همه CISA ADP / Vulnrichment
mediatek mt8765 همه CISA ADP / Vulnrichment
mediatek mt8766 همه CISA ADP / Vulnrichment
mediatek mt8766r همه CISA ADP / Vulnrichment
mediatek mt8768 همه CISA ADP / Vulnrichment
mediatek mt8771 همه CISA ADP / Vulnrichment
mediatek mt8781 همه CISA ADP / Vulnrichment
mediatek mt8786 همه CISA ADP / Vulnrichment
mediatek mt8788 همه CISA ADP / Vulnrichment
mediatek mt8788e همه CISA ADP / Vulnrichment
mediatek mt8791t همه CISA ADP / Vulnrichment
mediatek mt8797 همه CISA ADP / Vulnrichment
mediatek mt8798 همه CISA ADP / Vulnrichment
mediatek mt8863t همه CISA ADP / Vulnrichment

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۰۹/۱۲
آخرین به‌روزرسانی
۱۴۰۳/۰۹/۱۲
وضعیت
منتشرشده
صادرکننده (CNA)
MediaTek

پیش‌بینی بهره‌برداری (EPSS)

۰٫۳٪
احتمال بهره‌برداری در ۳۰ روز
۲۳٫۴٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-125
    Out-of-bounds Read