CVE-2024-20051

LOW

Published Apr 1, 2024 Modified Apr 23, 2025

Description

In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541758.

Is your site exposed to CVE-2024-20051?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

2.3

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions
linuxfoundation	yocto	All
rdkcentral	rdk-b	All
google	android	All
google	android	All
google	android	All
openwrt	openwrt	All
openwrt	openwrt	All
mediatek	mt2713	All
mediatek	mt2737	All
mediatek	mt6781	All
mediatek	mt6789	All
mediatek	mt6835	All
mediatek	mt6855	All
mediatek	mt6879	All
mediatek	mt6880	All
mediatek	mt6886	All
mediatek	mt6890	All
mediatek	mt6895	All
mediatek	mt6980	All
mediatek	mt6983	All
mediatek	mt6985	All
mediatek	mt6989	All
mediatek	mt6990	All
mediatek	mt8167	All
mediatek	mt8168	All
mediatek	mt8173	All
mediatek	mt8175	All
mediatek	mt8188	All
mediatek	mt8195	All
mediatek	mt8321	All
mediatek	mt8362a	All
mediatek	mt8365	All
mediatek	mt8385	All
mediatek	mt8390	All
mediatek	mt8395	All
mediatek	mt8666	All
mediatek	mt8667	All
mediatek	mt8673	All
mediatek	mt8765	All
mediatek	mt8766	All
mediatek	mt8768	All
mediatek	mt8781	All
mediatek	mt8786	All
mediatek	mt8788	All
mediatek	mt8789	All
mediatek	mt8791	All
mediatek	mt8791t	All
mediatek	mt8796	All
mediatek	mt8797	All
mediatek	mt8798	All

References

Advisories & Patches

https://corp.mediatek.com/product-security-bulletin/April-2024 https://corp.mediatek.com/product-security-bulletin/April-2024

Frequently Asked Questions

What is CVE-2024-20051? +

How severe is CVE-2024-20051? +

CVE-2024-20051 has a CVSS v3.1 score of 2.3 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-20051? +

CVE-2024-20051 affects products from google, linuxfoundation, mediatek, openwrt, rdkcentral, specifically: android, mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798, openwrt, rdk-b, yocto. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-20051? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-50195 9.9

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint …

CVE-2026-32604 9.9

Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad …

CVE-2026-44477 9.9

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics …

CVE-2026-32613 9.9

Spinnaker is an open source, multi-cloud continuous delivery platform. Echo like some other services, uses SPeL (Spring Expression Language) to …

CVE-2023-27584 9.8

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing …

CVE-2024-48063 9.8

In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior …