In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID: MSV-1796.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/January-2025 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Apr 2025, 13:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:5.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt3603:-:*:*:*:*:*:*:* cpe:2.3:a:linuxfoundation:yocto:3.3:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:* |
|
| First Time |
Mediatek mt6897
Linuxfoundation yocto Mediatek mt8766 Google android Mediatek mt6886 Mediatek mt8798 Mediatek mt6835 Mediatek mt3603 Mediatek Mediatek mt7920 Mediatek mt6878 Mediatek mt8532 Mediatek mt8796 Mediatek mt8775 Mediatek mt7922 Linuxfoundation Mediatek software Development Kit Mediatek mt7902 Mediatek mt8768 Mediatek mt8518s |
|
| CWE | CWE-787 | |
| References | () https://corp.mediatek.com/product-security-bulletin/January-2025 - Vendor Advisory |
06 Jan 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-06 04:15
Updated : 2025-04-22 13:50
NVD link : CVE-2024-20148
Mitre link : CVE-2024-20148
JSON object : View
Products Affected
mediatek
- mt6897
- mt8518s
- mt8775
- mt8768
- mt8766
- mt3603
- mt6878
- software_development_kit
- mt8798
- mt8796
- mt7920
- mt6835
- mt7922
- mt6886
- mt8532
- mt7902
linuxfoundation
- yocto
- android
CWE
CWE-787
Out-of-bounds Write