CVE-2024-20151

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01399339; Issue ID: MSV-1928.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/January-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:mediatek:nr16:-:::::::*
	cpe:2.3:o:mediatek:nr17:-:::::::*

OR	cpe:2.3:h:mediatek:mt2737:-:::::::*
	cpe:2.3:h:mediatek:mt2739:-:::::::*
	cpe:2.3:h:mediatek:mt6789:-:::::::*
	cpe:2.3:h:mediatek:mt6813:-:::::::*
	cpe:2.3:h:mediatek:mt6815:-:::::::*
	cpe:2.3:h:mediatek:mt6835:-:::::::*
	cpe:2.3:h:mediatek:mt6835t:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6878:-:::::::*
	cpe:2.3:h:mediatek:mt6878t:-:::::::*
	cpe:2.3:h:mediatek:mt6879:-:::::::*
	cpe:2.3:h:mediatek:mt6886:-:::::::*
	cpe:2.3:h:mediatek:mt6895:-:::::::*
	cpe:2.3:h:mediatek:mt6895t:-:::::::*
	cpe:2.3:h:mediatek:mt6896:-:::::::*
	cpe:2.3:h:mediatek:mt6897:-:::::::*
	cpe:2.3:h:mediatek:mt6899:-:::::::*
	cpe:2.3:h:mediatek:mt6980:-:::::::*
	cpe:2.3:h:mediatek:mt6980d:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6986:-:::::::*
	cpe:2.3:h:mediatek:mt6986d:-:::::::*
	cpe:2.3:h:mediatek:mt6988:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt6991:-:::::::*
	cpe:2.3:h:mediatek:mt8676:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*
	cpe:2.3:h:mediatek:mt8798:-:::::::*
	cpe:2.3:h:mediatek:mt8863:-:::::::*

History

21 Apr 2025, 17:13

Type	Values Removed	Values Added
References	~~() https://corp.mediatek.com/product-security-bulletin/January-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/January-2025 - Vendor Advisory
First Time		Mediatek mt6985 Mediatek mt6813 Mediatek mt6899 Mediatek mt6895t Mediatek mt2739 Mediatek mt6878t Mediatek mt6895 Mediatek mt6789 Mediatek mt6986d Mediatek mt8676 Mediatek mt6980d Mediatek mt6835t Mediatek mt6986 Mediatek mt6896 Mediatek mt6983 Mediatek mt8798 Mediatek mt6879 Mediatek nr16 Mediatek mt6855 Mediatek mt6980 Mediatek mt6991 Mediatek mt8863 Mediatek nr17 Mediatek mt6897 Mediatek mt6989 Mediatek mt6990 Mediatek Mediatek mt2737 Mediatek mt8678 Mediatek mt6988 Mediatek mt6815 Mediatek mt6886 Mediatek mt6835 Mediatek mt6878
Summary		(es) En Modem, es posible que se produzca una escritura fuera de los límites debido a una comprobación incorrecta de los límites. Esto podría provocar una escalada local de privilegios si un actor malintencionado ya ha obtenido el privilegio del sistema. No se necesita la interacción del usuario para la explotación. ID de parche: MOLY01399339; ID de problema: MSV-1928.
CPE		cpe:2.3:h:mediatek:mt2739:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:h:mediatek:mt6895t:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:h:mediatek:mt6835t:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6991:-:::::::* cpe:2.3:o:mediatek:nr17:-:::::::* cpe:2.3:h:mediatek:mt6813:-:::::::* cpe:2.3:h:mediatek:mt6980d:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt6878t:-:::::::* cpe:2.3:h:mediatek:mt6835:-:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6878:-:::::::* cpe:2.3:h:mediatek:mt6897:-:::::::* cpe:2.3:h:mediatek:mt6980:-:::::::* cpe:2.3:h:mediatek:mt6899:-:::::::* cpe:2.3:h:mediatek:mt6986d:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:h:mediatek:mt8676:-:::::::* cpe:2.3:h:mediatek:mt8798:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6986:-:::::::* cpe:2.3:o:mediatek:nr16:-:::::::* cpe:2.3:h:mediatek:mt2737:-:::::::* cpe:2.3:h:mediatek:mt6988:-:::::::* cpe:2.3:h:mediatek:mt6896:-:::::::* cpe:2.3:h:mediatek:mt8863:-:::::::* cpe:2.3:h:mediatek:mt6815:-:::::::*

06 Jan 2025, 15:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.7

06 Jan 2025, 04:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-06 04:15

Updated : 2025-04-21 17:13

NVD link : CVE-2024-20151

Mitre link : CVE-2024-20151

CVE.ORG link : CVE-2024-20151

JSON object : View

Products Affected

mediatek

mt6980
mt6990
mt6878t
mt6855
mt6983
mt8863
mt8676
mt6813
mt6989
nr16
mt6789
mt6815
mt8798
mt6895
mt6991
mt6879
mt8678
mt6985
mt2737
mt6986
mt6835
mt6895t
mt6886
mt6980d
mt6878
mt6986d
nr17
mt6988
mt6896
mt6897
mt2739
mt6899
mt6835t

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2024-20151", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2025-01-06T04:15:07.413", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/January-2025", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@mediatek.com", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01399339; Issue ID: MSV-1928."}, {"lang": "es", "value": "En Modem, es posible que se produzca una escritura fuera de los l\u00edmites debido a una comprobaci\u00f3n incorrecta de los l\u00edmites. Esto podr\u00eda provocar una escalada local de privilegios si un actor malintencionado ya ha obtenido el privilegio del sistema. No se necesita la interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: MOLY01399339; ID de problema: MSV-1928."}], "lastModified": "2025-04-21T17:13:45.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B763B71-F913-45B4-B91E-D7F0670C4315"}, {"criteria": "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9C2A1118-B5F7-4EF5-B329-0887B5F3430E"}, {"criteria": "cpe:2.3:h:mediatek:mt2739:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7F273033-3332-45C6-B620-A6800D35284C"}, {"criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49"}, {"criteria": "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"}, {"criteria": "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B7122918-8C44-4F24-82E4-B8448247FC83"}, {"criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5"}, {"criteria": "cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7FE7DBA-479C-402B-8485-9D14E70F25EB"}, {"criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"}, {"criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53"}, {"criteria": "cpe:2.3:h:mediatek:mt6878t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE9875F3-794F-4D3A-B450-8FEA21ECCB2A"}, {"criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"}, {"criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5"}, {"criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"}, {"criteria": "cpe:2.3:h:mediatek:mt6895t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A97CE1E0-7B77-49BA-8D92-9AF031CD18FE"}, {"criteria": "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33DEF766-EAF1-4E36-BB7C-43069B26507A"}, {"criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66"}, {"criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"}, {"criteria": "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"}, {"criteria": "cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2758122C-4D11-4D34-9B72-3905F3A28448"}, {"criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"}, {"criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"}, {"criteria": "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"}, {"criteria": "cpe:2.3:h:mediatek:mt6986d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68AA1CF7-F1CB-44A0-980E-DB32D9E379B9"}, {"criteria": "cpe:2.3:h:mediatek:mt6988:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ADB95144-97C3-4329-99DB-CB1B6FBB8A2D"}, {"criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255"}, {"criteria": "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"}, {"criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC"}, {"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78"}, {"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"}, {"criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8"}, {"criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}

6.7 /10