CVE-2024-20088

Summary

CVE-2024-20088 is a vulnerability that affects multiple MediaTek products, including models like wsdzGb and wsd2fj, due to an out-of-bounds read caused by a missing bounds check. This flaw can lead to local information disclosure, requiring system execution privileges for exploitation, but does not necessitate user interaction. The vulnerability has been assigned a medium severity rating with a CVSS score of 4.4, indicating a high confidentiality impact. Organizations are advised to apply the available patch (ID: ALPS08932099) to mitigate potential risks associated with this vulnerability. For further details and updates, users can refer to the vendor's security bulletin published in September 2024.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.