CVE-2024-20085

Summary

CVE-2024-20085 is a vulnerability characterized by a possible out-of-bounds read due to a missing bounds check, which affects various MediaTek products including models such as wsd2fb, wsdzGb, and x-PIq4. Exploitation of this vulnerability could lead to local information disclosure, requiring high privileges for successful execution but not necessitating user interaction. The confidentiality impact is rated as high, with an exploitability score of 0.8 and a medium severity base score of 4.4 according to the NVD. To remediate this issue, users are advised to apply the patch identified as ALPS08944204. Organizations utilizing affected products should address this vulnerability promptly to mitigate risks associated with potential unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.