CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - security@mediatek.com
- Published
- 2024-10-07
- Last modified
- 2024-10-07
- Weaknesses
- CWE-617
Affected products
- Mt2735 (Mediatek)
- Mt6833 (Mediatek)
- Mt6853 (Mediatek)
- Mt6855 (Mediatek)
- Mt6873 (Mediatek)
- Mt6875 (Mediatek)
- Mt6875t (Mediatek)
- Mt6877 (Mediatek)
- Mt6880 (Mediatek)
- Mt6883 (Mediatek)
- Mt6885 (Mediatek)
- Mt6889 (Mediatek)
- Mt6890 (Mediatek)
- Mt6891 (Mediatek)
- Mt6893 (Mediatek)
- Mt8675 (Mediatek)
- Mt8771 (Mediatek)
- Mt8791 (Mediatek)
- Mt8791t (Mediatek)
- Mt8797 (Mediatek)
- Nr15 (Mediatek)
- Mt2735 (Mediatek Inc.)
- Mt6833 (Mediatek Inc.)
- Mt6853 (Mediatek Inc.)
- Mt6855 (Mediatek Inc.)
- Mt6873 (Mediatek Inc.)
- Mt6875 (Mediatek Inc.)
- Mt6875t (Mediatek Inc.)
- Mt6877 (Mediatek Inc.)
- Mt6880 (Mediatek Inc.)
- Mt6883 (Mediatek Inc.)
- Mt6885 (Mediatek Inc.)
- Mt6889 (Mediatek Inc.)
- Mt6890 (Mediatek Inc.)
- Mt6891 (Mediatek Inc.)
- Mt6893 (Mediatek Inc.)
- Mt8675 (Mediatek Inc.)
- Mt8771 (Mediatek Inc.)
- Mt8791 (Mediatek Inc.)
- Mt8791t (Mediatek Inc.)
- Mt8797 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/October-2024
