{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T22:45:13.724","vulnerabilities":[{"cve":{"id":"CVE-2024-20140","sourceIdentifier":"security@mediatek.com","published":"2025-01-06T04:15:06.513","lastModified":"2026-06-17T07:06:03.840","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020."},{"lang":"es","value":"En el estado de encendido, existe la posibilidad de una escritura fuera de los límites debido a una verificación de los límites faltante. Esto podría provocar una escalada local de privilegios si un actor malintencionado ya obtuvo el privilegio del sistema. No se necesita la interacción del usuario para la explotación. ID de parche: ALPS09270402; ID de problema: MSV-2020."}],"affected":[{"source":"security@mediatek.com","affectedData":[{"vendor":"MediaTek, Inc.","product":"MT6739, MT6761, MT6768, MT6781, MT6833, MT6853, MT6877, MT6885, MT6893, MT8518S, MT8532","versions":[{"version":"Android 12.0, 13.0, 14.0, 15.0 / Yocto 3.3, 4.0, 5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:56:02.575925Z","id":"CVE-2024-20140","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@mediatek.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linuxfoundation:yocto:3.3:*:*:*:*:*:*:*","matchCriteriaId":"2385F2C9-3EA1-424B-AB8D-A672BF1CBE56"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*","matchCriteriaId":"437D8F9D-67DF-47A5-9C96-5B51D1562951"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxfoundation:yocto:5.0:*:*:*:*:*:*:*","matchCriteriaId":"067BC2E4-D44D-4817-861C-8596A497E183"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F8FB8EE9-FC56-4D5E-AE55-A5967634740C"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*","matchCriteriaId":"879FFD0C-9B38-4CAA-B057-1086D794D469"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*","matchCriteriaId":"2700BCC5-634D-4EC6-AB67-5B678D5F951D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*","matchCriteriaId":"8538774C-906D-4B03-A3E7-FA7A55E0DA9E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*","matchCriteriaId":"7FA8A390-9F52-4CF3-9B45-936CE3E2B828"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*","matchCriteriaId":"F726F486-A86F-4215-AD93-7A07A071844A"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*","matchCriteriaId":"06CD97E1-8A76-48B4-9780-9698EF5A960F"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*","matchCriteriaId":"C4EEE021-6B2A-47A0-AC6B-55525A40D718"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*","matchCriteriaId":"9814939B-F05E-4870-90C0-7C0F6BAAEB39"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*","matchCriteriaId":"366F1912-756B-443E-9962-224937DD7DFB"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*","matchCriteriaId":"7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*","matchCriteriaId":"DD64413C-C774-4C4F-9551-89E1AA9469EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*","matchCriteriaId":"213B5C7F-D965-4312-9CDF-4F06FA77D401"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*","matchCriteriaId":"6069CD03-6AB1-4A06-88CF-EFBDEA84CDE2"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*","matchCriteriaId":"EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"}]}]}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/January-2025","source":"security@mediatek.com","tags":["Vendor Advisory"]}]}}]}