CVE Vulnerabilities

CVE-2024-20022

Published: Mar 04, 2024 | Modified: Mar 13, 2025
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.

Affected Software

NameVendorStart VersionEnd Version
YoctoLinuxfoundation3.3 (including)3.3 (including)
RdkbRdkcentral2022q3 (including)2022q3 (including)
AndroidGoogle12.0 (including)12.0 (including)
AndroidGoogle13.0 (including)13.0 (including)
AndroidGoogle14.0 (including)14.0 (including)
OpenwrtOpenwrt19.07.0 (including)19.07.0 (including)
OpenwrtOpenwrt21.02.0 (including)21.02.0 (including)

References