CVE-2024-20152
In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue ID: MSV-1798.
- Score
- CVSS 3.1 4.4 Medium
- Status
- Analyzed - security@mediatek.com
- Published
- 2025-01-06
- Last modified
- 2025-01-06
- Weaknesses
- CWE-617
Affected products
- Android (Google)
- Yocto (Linuxfoundation)
- Software Development Kit (Mediatek)
- Mt2737 (Mediatek Inc.)
- Mt3603 (Mediatek Inc.)
- Mt6835 (Mediatek Inc.)
- Mt6878 (Mediatek Inc.)
- Mt6886 (Mediatek Inc.)
- Mt6897 (Mediatek Inc.)
- Mt6990 (Mediatek Inc.)
- Mt7902 (Mediatek Inc.)
- Mt7920 (Mediatek Inc.)
- Mt7922 (Mediatek Inc.)
- Mt8518s (Mediatek Inc.)
- Mt8532 (Mediatek Inc.)
- Mt8755 (Mediatek Inc.)
- Mt8766 (Mediatek Inc.)
- Mt8768 (Mediatek Inc.)
- Mt8775 (Mediatek Inc.)
- Mt8781 (Mediatek Inc.)
- Mt8796 (Mediatek Inc.)
- Mt8798 (Mediatek Inc.)
- Mt8893 (Mediatek Inc.)
- Openwrt (Openwrt)
References
- https://corp.mediatek.com/product-security-bulletin/January-2025
