CVE-2024-20148
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID: MSV-1796.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - security@mediatek.com
- Published
- 2025-01-06
- Last modified
- 2026-02-26
- Weaknesses
- CWE-787
Affected products
- Android (Google)
- Yocto (Linuxfoundation)
- Software Development Kit (Mediatek)
- Mt3603 (Mediatek Inc.)
- Mt6835 (Mediatek Inc.)
- Mt6878 (Mediatek Inc.)
- Mt6886 (Mediatek Inc.)
- Mt6897 (Mediatek Inc.)
- Mt7902 (Mediatek Inc.)
- Mt7920 (Mediatek Inc.)
- Mt7922 (Mediatek Inc.)
- Mt8518s (Mediatek Inc.)
- Mt8532 (Mediatek Inc.)
- Mt8766 (Mediatek Inc.)
- Mt8768 (Mediatek Inc.)
- Mt8775 (Mediatek Inc.)
- Mt8796 (Mediatek Inc.)
- Mt8798 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/January-2025
