Possible Out-of-Bounds Read Vulnerability in vdec System

CVE-2024-20123

What is CVE-2024-20123?

An out of bounds read vulnerability has been identified in the MediaTek vdec, stemming from improper structure design. This flaw may allow local information disclosure when exploited. Importantly, no user interaction is required for this potential exploitation, as it operates with system execution privileges. It is crucial for affected users to apply the necessary patches, specifically Patch ID: ALPS09008925, to mitigate this security risk and protect sensitive information.

References