VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 5, 2024· Updated May 15, 2025

CVE-2024-20007

CVE-2024-20007

Description

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mediatek/mp3 decoderllm-create
  • MediaTek, Inc./MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8321, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT8798v5
    Range: Android 12.0, 13.0, 14.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.