CVE-2024-20087

Summary

CVE-2024-20087 is a vulnerability found in several MediaTek products, identified as an out-of-bounds write due to inadequate bounds checking, which could allow local escalation of privileges. The affected products include various models such as wsdzGj, wsdzGi, wsdzGh, wsd2ff, wsdzGf, and wsdzGe. Exploitation of this vulnerability does not require user interaction and has a low complexity rating with potential high impacts on integrity and confidentiality. To remediate the issue, a patch designated ALPS08932916 should be applied promptly. The vulnerability poses significant security risks to organizations using these products, with a CVSS base score of 7.8 indicating high severity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.