CVE-2024-20065

mediumpriority · track · 0EPSS 0.001 · 1 %ileDEEUNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.10% (1st) EPSS

CVSS 4 · medium

Is it mine?

12 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · scored 2026-10-27

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08698617; Issue ID: MSV-1394.

cvss

Technical severity, 0–10. One row per scoring source.

4.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.7–4

v3.14mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.14mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondaryexploitability 2.5 · impact 1.4

v3.13.7lowCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-284USCWE-284US

affected products (12)

Products and version ranges known to be affected.

Google Android <12all versionscert_bundDE
Google Android <12Lall versionscert_bundDE
Google Android <13all versionscert_bundDE
Google Android <14all versionscert_bundDE
Google Android< 12cert_bundDE
Google Android< 12Lcert_bundDE
Google Android< 13cert_bundDE
Google Android< 14cert_bundDE
MediaTek, Inc. MT6768, MT6781, MT6835, MT6853, MT6855, MT6877, MT6879, MT6885, MT6886, MT6893, MT6983, MT6985, MT6989≤ Android 12.0, 13.0, 14.0enisa_euvdEU
google android= 12.0nvdUScpe:2.3:o:google:android:*:*:*:*:*:*:*:*
google android= 13.0nvdUScpe:2.3:o:google:android:*:*:*:*:*:*:*:*
google android= 14.0nvdUScpe:2.3:o:google:android:*:*:*:*:*:*:*:*

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2024-0240Kwetsbaarheden verholpen in Google Android en Samsung MobileNL2024-06-07csaf · ncsc_nlNL
Google heeft kwetsbaarheden verholpen in Android.
WID-SEC-W-2024-1278Android Patchday - June 2024: Mehrere SchwachstellenDeutsch2024-06-03csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, um vertrauliche Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.
ASB-A-3321787462024-06-01vendor · osvUS

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv cert_bund nvd ncsc_nl NVD CVE.org MITRE

published 2024-06-03modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan