CVE-2024-20040 - Vulnerability Details

Vendors	Products
Google	Android
Linux	Linux Kernel
Mediatek	Mt2713 Mt6580 Mt6761 Mt6762 Mt6768 Mt6781 Mt6789 Mt6833 Mt6853 Mt6853t Mt6855 Mt6873 Mt6875 Mt6877 Mt6879 Mt6883 Mt6885 Mt6886 Mt6889 Mt6890 Mt6891 Mt6893 Mt6895 Mt6983 Mt6985 Mt6989 Mt6990 Mt7902 Mt7915 Mt7916 Mt7920 Mt7921 Mt7922 Mt7925 Mt7927 Mt7981 Mt7986 Mt8188 Mt8195 Mt8370 Mt8390 Mt8395 Mt8518s Mt8532 Mt8673

Link	Providers
https://corp.mediatek.com/product-security-bulletin/April-2024

Type	Values Removed	Values Added
First Time appeared		Google Google android Linux Linux linux Kernel Mediatek Mediatek mt2713 Mediatek mt6580 Mediatek mt6761 Mediatek mt6762 Mediatek mt6768 Mediatek mt6781 Mediatek mt6789 Mediatek mt6833 Mediatek mt6853 Mediatek mt6853t Mediatek mt6855 Mediatek mt6873 Mediatek mt6875 Mediatek mt6877 Mediatek mt6879 Mediatek mt6883 Mediatek mt6885 Mediatek mt6886 Mediatek mt6889 Mediatek mt6890 Mediatek mt6891 Mediatek mt6893 Mediatek mt6895 Mediatek mt6983 Mediatek mt6985 Mediatek mt6989 Mediatek mt6990 Mediatek mt7902 Mediatek mt7915 Mediatek mt7916 Mediatek mt7920 Mediatek mt7921 Mediatek mt7922 Mediatek mt7925 Mediatek mt7927 Mediatek mt7981 Mediatek mt7986 Mediatek mt8188 Mediatek mt8195 Mediatek mt8370 Mediatek mt8390 Mediatek mt8395 Mediatek mt8518s Mediatek mt8532 Mediatek mt8673
Weaknesses		CWE-787
CPEs		cpe:2.3:h:mediatek:mt2713:-:::::::* cpe:2.3:h:mediatek:mt6580:-:::::::* cpe:2.3:h:mediatek:mt6761:-:::::::* cpe:2.3:h:mediatek:mt6762:-:::::::* cpe:2.3:h:mediatek:mt6768:-:::::::* cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:h:mediatek:mt6833:-:::::::* cpe:2.3:h:mediatek:mt6853:-:::::::* cpe:2.3:h:mediatek:mt6853t:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt6873:-:::::::* cpe:2.3:h:mediatek:mt6875:-:::::::* cpe:2.3:h:mediatek:mt6877:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:h:mediatek:mt6883:-:::::::* cpe:2.3:h:mediatek:mt6885:-:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6889:-:::::::* cpe:2.3:h:mediatek:mt6890:-:::::::* cpe:2.3:h:mediatek:mt6891:-:::::::* cpe:2.3:h:mediatek:mt6893:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt7902:-:::::::* cpe:2.3:h:mediatek:mt7915:-:::::::* cpe:2.3:h:mediatek:mt7916:-:::::::* cpe:2.3:h:mediatek:mt7920:-:::::::* cpe:2.3:h:mediatek:mt7921:-:::::::* cpe:2.3:h:mediatek:mt7922:-:::::::* cpe:2.3:h:mediatek:mt7925:-:::::::* cpe:2.3:h:mediatek:mt7927:-:::::::* cpe:2.3:h:mediatek:mt7981:-:::::::* cpe:2.3:h:mediatek:mt7986:-:::::::* cpe:2.3:h:mediatek:mt8188:-:::::::* cpe:2.3:h:mediatek:mt8195:-:::::::* cpe:2.3:h:mediatek:mt8370:-:::::::* cpe:2.3:h:mediatek:mt8390:-:::::::* cpe:2.3:h:mediatek:mt8395:-:::::::* cpe:2.3:h:mediatek:mt8518s:-:::::::* cpe:2.3:h:mediatek:mt8532:-:::::::* cpe:2.3:h:mediatek:mt8673:-:::::::* cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:o:linux:linux_kernel:4.19:-::::::
Vendors & Products		Google Google android Linux Linux linux Kernel Mediatek Mediatek mt2713 Mediatek mt6580 Mediatek mt6761 Mediatek mt6762 Mediatek mt6768 Mediatek mt6781 Mediatek mt6789 Mediatek mt6833 Mediatek mt6853 Mediatek mt6853t Mediatek mt6855 Mediatek mt6873 Mediatek mt6875 Mediatek mt6877 Mediatek mt6879 Mediatek mt6883 Mediatek mt6885 Mediatek mt6886 Mediatek mt6889 Mediatek mt6890 Mediatek mt6891 Mediatek mt6893 Mediatek mt6895 Mediatek mt6983 Mediatek mt6985 Mediatek mt6989 Mediatek mt6990 Mediatek mt7902 Mediatek mt7915 Mediatek mt7916 Mediatek mt7920 Mediatek mt7921 Mediatek mt7922 Mediatek mt7925 Mediatek mt7927 Mediatek mt7981 Mediatek mt7986 Mediatek mt8188 Mediatek mt8195 Mediatek mt8370 Mediatek mt8390 Mediatek mt8395 Mediatek mt8518s Mediatek mt8532 Mediatek mt8673
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20040", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2023-11-02T13:35:35.154Z", "datePublished": "2024-04-01T02:34:53.921Z", "dateUpdated": "2025-03-13T18:23:26.908Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2024-04-01T02:34:53.921Z"}, "descriptions": [{"lang": "en", "value": "In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798", "versions": [{"version": "Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2024"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Elevation of Privilege"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-787", "lang": "en", "description": "CWE-787 Out-of-bounds Write"}]}], "affected": [{"vendor": "mediatek", "product": "mt6768", "cpes": ["cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6781", "cpes": ["cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt2713", "cpes": ["cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6580", "cpes": ["cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6761", "cpes": ["cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6762", "cpes": ["cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6789", "cpes": ["cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6833", "cpes": ["cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6853", "cpes": ["cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6853t", "cpes": ["cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6855", "cpes": ["cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6873", "cpes": ["cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6875", "cpes": ["cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6877", "cpes": ["cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6879", "cpes": ["cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6883", "cpes": ["cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6885", "cpes": ["cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6886", "cpes": ["cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6889", "cpes": ["cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6890", "cpes": ["cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6891", "cpes": ["cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6893", "cpes": ["cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6895", "cpes": ["cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6983", "cpes": ["cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6985", "cpes": ["cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6989", "cpes": ["cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt6990", "cpes": ["cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7902", "cpes": ["cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7915", "cpes": ["cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7916", "cpes": ["cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7920", "cpes": ["cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7921", "cpes": ["cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7922", "cpes": ["cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7925", "cpes": ["cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7927", "cpes": ["cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7981", "cpes": ["cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt7986", "cpes": ["cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8188", "cpes": ["cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8195", "cpes": ["cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8370", "cpes": ["cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8390", "cpes": ["cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8395", "cpes": ["cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8518s", "cpes": ["cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8532", "cpes": ["cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "mediatek", "product": "mt8673", "cpes": ["cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "-", "status": "affected"}]}, {"vendor": "google", "product": "android", "cpes": ["cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "12.0", "status": "affected"}, {"version": "13.0", "status": "affected"}, {"version": "14.0", "status": "affected"}]}, {"vendor": "linux", "product": "linux_kernel", "cpes": ["cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.19", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-04-02T17:44:22.021834Z", "id": "CVE-2024-20040", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T18:23:26.908Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:52:31.513Z"}, "title": "CVE Program Container", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2024", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-20040 (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

state : PUBLISHED (string)

assignerShortName : MediaTek (string)

dateReserved : 2023-11-02T13:35:35.154Z (string)

datePublished : 2024-04-01T02:34:53.921Z (string)

dateUpdated : 2025-03-13T18:23:26.908Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2024-04-01T02:34:53.921Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979. (string)

}

]

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798 (string)

versions : [ »

0 : { »

version : Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3 (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : Elevation of Privilege (string)

}

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-787 (string)

lang : en (string)

description : CWE-787 Out-of-bounds Write (string)

}

]

}

]

affected : [ »

0 : { »

vendor : mediatek (string)

product : mt6768 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

1 : { »

vendor : mediatek (string)

product : mt6781 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

2 : { »

vendor : mediatek (string)

product : mt2713 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

3 : { »

vendor : mediatek (string)

product : mt6580 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

4 : { »

vendor : mediatek (string)

product : mt6761 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

5 : { »

vendor : mediatek (string)

product : mt6762 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

6 : { »

vendor : mediatek (string)

product : mt6789 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

7 : { »

vendor : mediatek (string)

product : mt6833 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

8 : { »

vendor : mediatek (string)

product : mt6853 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

9 : { »

vendor : mediatek (string)

product : mt6853t (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

10 : { »

vendor : mediatek (string)

product : mt6855 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

11 : { »

vendor : mediatek (string)

product : mt6873 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

12 : { »

vendor : mediatek (string)

product : mt6875 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

13 : { »

vendor : mediatek (string)

product : mt6877 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

14 : { »

vendor : mediatek (string)

product : mt6879 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

15 : { »

vendor : mediatek (string)

product : mt6883 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

16 : { »

vendor : mediatek (string)

product : mt6885 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

17 : { »

vendor : mediatek (string)

product : mt6886 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

18 : { »

vendor : mediatek (string)

product : mt6889 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

19 : { »

vendor : mediatek (string)

product : mt6890 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

20 : { »

vendor : mediatek (string)

product : mt6891 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

21 : { »

vendor : mediatek (string)

product : mt6893 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

22 : { »

vendor : mediatek (string)

product : mt6895 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

23 : { »

vendor : mediatek (string)

product : mt6983 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

24 : { »

vendor : mediatek (string)

product : mt6985 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

25 : { »

vendor : mediatek (string)

product : mt6989 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

26 : { »

vendor : mediatek (string)

product : mt6990 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

27 : { »

vendor : mediatek (string)

product : mt7902 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

28 : { »

vendor : mediatek (string)

product : mt7915 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

29 : { »

vendor : mediatek (string)

product : mt7916 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

30 : { »

vendor : mediatek (string)

product : mt7920 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

31 : { »

vendor : mediatek (string)

product : mt7921 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

32 : { »

vendor : mediatek (string)

product : mt7922 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

33 : { »

vendor : mediatek (string)

product : mt7925 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

34 : { »

vendor : mediatek (string)

product : mt7927 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

35 : { »

vendor : mediatek (string)

product : mt7981 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

36 : { »

vendor : mediatek (string)

product : mt7986 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

37 : { »

vendor : mediatek (string)

product : mt8188 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

38 : { »

vendor : mediatek (string)

product : mt8195 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

39 : { »

vendor : mediatek (string)

product : mt8370 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

40 : { »

vendor : mediatek (string)

product : mt8390 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

41 : { »

vendor : mediatek (string)

product : mt8395 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

42 : { »

vendor : mediatek (string)

product : mt8518s (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

43 : { »

vendor : mediatek (string)

product : mt8532 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

44 : { »

vendor : mediatek (string)

product : mt8673 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : - (string)

status : affected (string)

}

]

}

45 : { »

vendor : google (string)

product : android (string)

cpes : [ »

0 : cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* (string)

1 : cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* (string)

2 : cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 12.0 (string)

status : affected (string)

}

1 : { »

version : 13.0 (string)

status : affected (string)

}

2 : { »

version : 14.0 (string)

status : affected (string)

}

]

}

46 : { »

vendor : linux (string)

product : linux_kernel (string)

cpes : [ »

0 : cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 4.19 (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 8.8 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-04-02T17:44:22.021834Z (string)

id : CVE-2024-20040 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-13T18:23:26.908Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T21:52:31.513Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20040", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2023-11-02T13:35:35.154Z", "datePublished": "2024-04-01T02:34:53.921Z", "dateUpdated": "2025-03-13T18:23:26.908Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2024-04-01T02:34:53.921Z"}, "descriptions": [{"lang": "en", "value": "In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798", "versions": [{"version": "Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2024"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Elevation of Privilege"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:52:31.513Z"}, "title": "CVE Program Container", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2024", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-20040", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-02T17:44:22.021834Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6768", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6781", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt2713", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6580", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6761", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6762", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6789", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6833", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6853", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6853t", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6855", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6873", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6875", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6877", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6879", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6883", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6885", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6886", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6889", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6890", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6891", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6893", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6895", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6983", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6985", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6989", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6990", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7902", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7915", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7916", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7920", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7921", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7922", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7925", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7927", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7981", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7986", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8188", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8195", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8370", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8390", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8395", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8518s", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8532", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8673", "versions": [{"status": "affected", "version": "-"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*"], "vendor": "google", "product": "android", "versions": [{"status": "affected", "version": "12.0"}, {"status": "affected", "version": "13.0"}, {"status": "affected", "version": "14.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:*"], "vendor": "linux", "product": "linux_kernel", "versions": [{"status": "affected", "version": "4.19"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-20T17:45:21.789Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-20040 (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

state : PUBLISHED (string)

assignerShortName : MediaTek (string)

dateReserved : 2023-11-02T13:35:35.154Z (string)

datePublished : 2024-04-01T02:34:53.921Z (string)

dateUpdated : 2025-03-13T18:23:26.908Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2024-04-01T02:34:53.921Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979. (string)

}

]

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798 (string)

versions : [ »

0 : { »

version : Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3 (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : Elevation of Privilege (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T21:52:31.513Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 8.8 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-20040 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-04-02T17:44:22.021834Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6768 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6781 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt2713:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt2713 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6580 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6761 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6762 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6789 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6833 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6853 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6853t (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6855 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6873 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6875 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6877 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6879 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6883 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

16 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6885 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

17 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6886 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

18 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6889 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

19 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6890 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

20 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6891 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

21 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6893 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

22 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6895 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

23 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6983 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

24 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6985 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

25 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6989 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

26 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6990 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

27 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7902 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

28 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7915 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

29 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7916 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

30 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7920:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7920 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

31 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7921 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

32 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7922 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

33 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7925 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

34 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7927 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

35 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7981 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

36 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7986 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

37 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8188 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

38 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8195 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

39 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8370 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

40 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8390 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

41 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8395 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

42 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8518s (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

43 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8532 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

44 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8673 (string)

versions : [ »

0 : { »

status : affected (string)

version : - (string)

}

]

defaultStatus : unknown (string)

}

45 : { »

cpes : [ »

0 : cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* (string)

1 : cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* (string)

2 : cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* (string)

]

vendor : google (string)

product : android (string)

versions : [ »

0 : { »

status : affected (string)

version : 12.0 (string)

}

1 : { »

status : affected (string)

version : 13.0 (string)

}

2 : { »

status : affected (string)

version : 14.0 (string)

}

]

defaultStatus : unknown (string)

}

46 : { »

cpes : [ »

0 : cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:* (string)

]

vendor : linux (string)

product : linux_kernel (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.19 (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-787 (string)

description : CWE-787 Out-of-bounds Write (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-20T17:45:21.789Z (string)

}

]

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979."}, {"lang": "es", "value": "En el firmware WLAN, existe una posible escritura fuera de los l\u00edmites debido a una validaci\u00f3n de entrada incorrecta. Esto podr\u00eda conducir a una escalada remota de privilegios sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS08360153 (para conjuntos de chips MT6XXX) / WCNCR00363530 (para conjuntos de chips MT79XX); ID del problema: MSV-979."}], "id": "CVE-2024-20040", "lastModified": "2025-03-13T19:15:41.530", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-04-01T03:15:07.847", "references": [{"source": "security@mediatek.com", "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://corp.mediatek.com/product-security-bulletin/April-2024"}], "sourceIdentifier": "security@mediatek.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979. (string)

}

1 : { »

lang : es (string)

value : En el firmware WLAN, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. Esto podría conducir a una escalada remota de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS08360153 (para conjuntos de chips MT6XXX) / WCNCR00363530 (para conjuntos de chips MT79XX); ID del problema: MSV-979. (string)

}

]

id : CVE-2024-20040 (string)

lastModified : 2025-03-13T19:15:41.530 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-04-01T03:15:07.847 (string)

references : [ »

0 : { »

source : security@mediatek.com (string)

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://corp.mediatek.com/product-security-bulletin/April-2024 (string)

}

]

sourceIdentifier : security@mediatek.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object