Skip to content
Fencer Intel
medium 6.7

CVE-2024-20021 json

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error.

published 2y ago modified 4mo ago also EUVD-2024-17736

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 1%
public exploits
0
none known

Summary

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.

Is CVE-2024-20021 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2y ago

Exploit prediction

0.11% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • MediaTek, Inc. MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798
  • mediatek mt6853
  • mediatek mt6873
  • mediatek mt6885
  • mediatek mt6893
  • mediatek mt8168
  • mediatek mt8183
  • mediatek mt8188
  • mediatek mt8188t
  • mediatek mt8195
  • mediatek mt8195z
  • mediatek mt8362a
  • mediatek mt8365
  • mediatek mt8666
  • mediatek mt8667
  • mediatek mt8675
  • mediatek mt8765
  • mediatek mt8766
  • mediatek mt8766z
  • mediatek mt8768a
  • mediatek mt8768b
  • mediatek mt8768z
  • mediatek mt8781
  • mediatek mt8788
  • mediatek mt8788t
  • mediatek mt8788z
  • mediatek mt8792
  • mediatek mt8795t
  • mediatek mt8798
  • mediatek mt6768
  • mediatek mt6781
  • mediatek mt6785
  • mediatek mt6833
  • mediatek mt6877
  • mediatek mt8321
  • mediatek mt8666a
  • mediatek mt8673
  • mediatek mt8768
  • mediatek mt8768t
  • mediatek mt8786
  • mediatek mt8788x
  • mediatek mt8796

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.