CVE-2024-20117

Description

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.

References

https://corp.mediatek.com/product-security-bulletin/November-2024

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3