In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001358; Issue ID: MSV-1599.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/October-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Apr 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://corp.mediatek.com/product-security-bulletin/October-2024 - Vendor Advisory | |
| First Time |
Mediatek mt3605
Mediatek mt8698 Mediatek mt8695 Mediatek mt8796 Mediatek mt8678 Mediatek mt8512 Mediatek mt6990 Mediatek mt6985 Mediatek mt8893 Mediatek Mediatek software Development Kit Mediatek mt7927 Mediatek mt6989 Google android Mediatek mt8183 |
|
| CPE | cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* |
Information
Published : 2024-10-07 03:15
Updated : 2025-04-24 15:06
NVD link : CVE-2024-20103
Mitre link : CVE-2024-20103
CVE.ORG link : CVE-2024-20103
JSON object : View
Products Affected
mediatek
- mt3605
- mt8678
- mt6989
- mt8698
- mt6990
- mt8183
- mt6985
- mt8512
- mt8695
- mt8796
- mt8893
- software_development_kit
- mt7927
- android
CWE
CWE-787
Out-of-bounds Write