{ "id": "CVE-2024-20055", "sourceIdentifier": "security@mediatek.com", "published": "2024-04-01T03:15:08.640", "lastModified": "2024-11-21T08:51:55.380", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012." }, { "lang": "es", "value": "En imgsys, existe una posible divulgaci\u00f3n de informaci\u00f3n debido a una verificaci\u00f3n de los l\u00edmites faltantes. Esto podr\u00eda conducir a la divulgaci\u00f3n de informaci\u00f3n local con privilegios de ejecuci\u00f3n de System necesarios. Se necesita la interacci\u00f3n del usuario para la explotaci\u00f3n ID del parche: ALPS08518692; ID del problema: MSV-1012." } ], "metrics": {}, "references": [ { "url": "https://corp.mediatek.com/product-security-bulletin/April-2024", "source": "security@mediatek.com" }, { "url": "https://corp.mediatek.com/product-security-bulletin/April-2024", "source": "af854a3a-2127-422b-91ae-364da2661108" } ] }