CVE-2024-20021

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.

Affected

MediaTek, Inc. · MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798

CVSS v3.1 CNA

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.11% chance of exploitation in the next 30 days, 1st percentile

Published

2024-05-06

Updated

2024-08-01

Proof-of-concept exploits (1)

• quarkslab/samsung-bootchain-poc95★ · 2024-09-09

Security advisories

• https://corp.mediatek.com/product-security-bulletin/May-2024

References

• CVE Record
• NVD entry

Related

• CVE-2020-0069
• CVE-2024-20820
• CVE-2024-20832
• CVE-2024-20865