What is CVE-2024-20133?

CVE-2024-20133 is a medium-severity vulnerability in Mediatek Mt6879, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2024-12-02.

How severe is CVE-2024-20133?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Buffer overflow in Mediatek Mt6879

CVE-2024-20133

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MO…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (7.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mediatek Mt6879
Mediatek Mt6886
Mediatek Mt6895
Mediatek Mt6895t
Mediatek Mt6896
Mediatek Mt6980
Mediatek Mt6983
Mediatek Mt8673
Mediatek Mt8676
Mediatek Mt8795t

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

security@mediatek.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-20133?: CVE-2024-20133 is a medium-severity vulnerability in Mediatek Mt6879, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2024-12-02.
How severe is CVE-2024-20133?: Medium severity. CVSS v3 base score is 6.7 out of 10.