CVE-2024-20139

概要

参考情報

• corp.mediatek.com/product-security-bulletin/December-2024 · Vendor Advisory

yocto のその他の脆弱性

• CVE-2026-20435中 4.6In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, i…
• CVE-2025-20765中 4.7In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has…
• CVE-2025-20747中 6.7In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege …
• CVE-2025-20746中 6.7In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege …
• CVE-2025-20730中 6.7In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege…