In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/December-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Apr 2025, 13:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://corp.mediatek.com/product-security-bulletin/December-2024 - Vendor Advisory | |
| First Time |
Mediatek mt6985
Google android Mediatek mt6990 Mediatek mt8390 Mediatek mt8370 Mediatek Mediatek mt3605 Mediatek mt8195 Mediatek mt7925 Mediatek mt7927 Mediatek software Development Kit Mediatek mt6989 |
|
| CPE | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* |
02 Dec 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-02 04:15
Updated : 2025-04-22 13:49
NVD link : CVE-2024-20138
Mitre link : CVE-2024-20138
CVE.ORG link : CVE-2024-20138
JSON object : View
Products Affected
mediatek
- mt6989
- mt6990
- mt8370
- mt6985
- mt8390
- mt3605
- mt7925
- mt7927
- mt8195
- software_development_kit
- android
CWE
CWE-125
Out-of-bounds Read