CVE Vulnerabilities

CVE-2024-20022

Published: Mar 04, 2024 | Modified: Jan 30, 2025
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.

Affected Software

Name Vendor Start Version End Version
Yocto Linuxfoundation 3.3 (including) 3.3 (including)
Rdkb Rdkcentral 2022q3 (including) 2022q3 (including)
Android Google 12.0 (including) 12.0 (including)
Android Google 13.0 (including) 13.0 (including)
Android Google 14.0 (including) 14.0 (including)
Openwrt Openwrt 19.07.0 (including) 19.07.0 (including)
Openwrt Openwrt 21.02.0 (including) 21.02.0 (including)

References