In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://corp.mediatek.com/product-security-bulletin/October-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
25 Apr 2025, 18:36
Type | Values Removed | Values Added |
---|---|---|
References | () https://corp.mediatek.com/product-security-bulletin/October-2024 - Vendor Advisory | |
CWE | CWE-787 | |
CPE | cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:* cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* |
|
First Time |
Mediatek mt3605
Mediatek mt8365 Mediatek mt8678 Google android Mediatek mt8755 Mediatek mt6990 Mediatek mt8676 Mediatek mt8698 Mediatek iot Yocto Mediatek Mediatek mt8512 Mediatek mt6985 Mediatek mt8796 Mediatek mt8183 Mediatek mt8775 Mediatek mt7927 Mediatek software Development Kit Mediatek mt6989 Mediatek mt8792 Mediatek mt8695 |
07 Oct 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-07 03:15
Updated : 2025-04-25 18:36
NVD link : CVE-2024-20100
Mitre link : CVE-2024-20100
JSON object : View
Products Affected
mediatek
- mt8695
- mt8512
- mt8698
- mt6989
- software_development_kit
- mt8796
- mt8183
- iot_yocto
- mt3605
- mt8775
- mt8365
- mt6985
- mt8678
- mt8755
- mt8676
- mt8792
- mt7927
- mt6990
- android
CWE
CWE-787
Out-of-bounds Write