Medium severity6.6NVD Advisory· Published Jan 6, 2025· Updated Jun 17, 2026
CVE-2024-20145
CVE-2024-20145
Description
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09290940; Issue ID: MSV-2040.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- MediaTek, Inc./MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8676v5Range: Android 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1
Patches
Vulnerability mechanics
References
1- corp.mediatek.com/product-security-bulletin/January-2025nvdVendor Advisory
News mentions
0No linked articles in our index yet.