CVE-2024-20100

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*

History

25 Apr 2025, 18:36

Type Values Removed Values Added
References () https://corp.mediatek.com/product-security-bulletin/October-2024 - () https://corp.mediatek.com/product-security-bulletin/October-2024 - Vendor Advisory
CWE CWE-787
CPE cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
First Time Mediatek mt3605
Mediatek mt8365
Google
Mediatek mt8678
Google android
Mediatek mt8755
Mediatek mt6990
Mediatek mt8676
Mediatek mt8698
Mediatek iot Yocto
Mediatek
Mediatek mt8512
Mediatek mt6985
Mediatek mt8796
Mediatek mt8183
Mediatek mt8775
Mediatek mt7927
Mediatek software Development Kit
Mediatek mt6989
Mediatek mt8792
Mediatek mt8695

07 Oct 2024, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-07 03:15

Updated : 2025-04-25 18:36


NVD link : CVE-2024-20100

Mitre link : CVE-2024-20100


JSON object : View

Products Affected

mediatek

  • mt8695
  • mt8512
  • mt8698
  • mt6989
  • software_development_kit
  • mt8796
  • mt8183
  • iot_yocto
  • mt3605
  • mt8775
  • mt8365
  • mt6985
  • mt8678
  • mt8755
  • mt8676
  • mt8792
  • mt7927
  • mt6990

google

  • android
CWE
CWE-787

Out-of-bounds Write