Possible Out of Bounds Write in WLAN Firmware Could Lead to Remote Code Execution
CVE-2024-20103

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mt3605, Mt6985, Mt6989, Mt6990, Mt7927, Mt8183, Mt8512, Mt8678, Mt8695, Mt8698, Mt8796, Mt8893
Vendor
CVE Published:
7 October 2024

What is CVE-2024-20103?

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001358; Issue ID: MSV-1599.

Affected Version(s)

MT3605, MT6985, MT6989, MT6990, MT7927, MT8183, MT8512, MT8678, MT8695, MT8698, MT8796, MT8893 Android 13.0, 14.0, 15.0 / SDK release 3.3 and before

References

https://corp.mediatek.com/product-security-bulletin/Octob...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.