CVE-2024-20141
In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291402; Issue ID: MSV-2073.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.10%
- CWE
- CWE-123
- Published
- 2025-02-03
- Last modified
- 2026-03-13
Affected products
- MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893
Weakness type
Related vulnerabilities
- CVE-2026-81579 — An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
- CVE-2026-20469 — In trusted_mem, there is a possible escalation of privilege due to improper input validation. This...
- CVE-2026-47473 — NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where...
- CVE-2026-45257 — Arbitrary file overwrite via the KTLS receive path
- CVE-2026-41952 — Local privilege escalation due to improper input validation. The following products are affected:...
- CVE-2025-14857 — Semtech LR11xx Memory Write Access Control Bypass
- CVE-2026-25634 — iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()
- CVE-2025-29943 — Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the...