In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.01788.

Exploitation none

Automatable yes

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
MediaTek, Inc. MT3605, MT6985, MT6989, MT6990, MT7927, MT8183, MT8365, MT8512, MT8676, MT8678, MT8695, MT8698, MT8755, MT8775, MT8792, MT8796 affected
Version Status Constraints
Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / Yocto 4.0 / IOT-v24.0 affected —

Configuration 1 [-]

AND
OR cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Google Subscribe
Android Subscribe
Mediatek Subscribe
Iot Yocto Subscribe
Mt3605 Subscribe
Mt6985 Subscribe
Mt6989 Subscribe
Mt6990 Subscribe
Mt7927 Subscribe
Mt8183 Subscribe
Mt8365 Subscribe
Mt8512 Subscribe
Mt8676 Subscribe
Mt8678 Subscribe
Mt8695 Subscribe
Mt8698 Subscribe
Mt8755 Subscribe
Mt8775 Subscribe
Mt8792 Subscribe
Mt8796 Subscribe
Software Development Kit Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://corp.mediatek.com/product-security-bulletin/October-2024 cve-icon cve-icon
History

Fri, 25 Apr 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek iot Yocto
Mediatek software Development Kit
CPEs cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Vendors & Products Mediatek iot Yocto
Mediatek software Development Kit

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Mediatek
Mediatek mt3605
Mediatek mt6985
Mediatek mt6989
Mediatek mt6990
Mediatek mt7927
Mediatek mt8183
Mediatek mt8365
Mediatek mt8512
Mediatek mt8676
Mediatek mt8678
Mediatek mt8695
Mediatek mt8698
Mediatek mt8755
Mediatek mt8775
Mediatek mt8792
Mediatek mt8796
CPEs cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
Vendors & Products Google
Google android
Mediatek
Mediatek mt3605
Mediatek mt6985
Mediatek mt6989
Mediatek mt6990
Mediatek mt7927
Mediatek mt8183
Mediatek mt8365
Mediatek mt8512
Mediatek mt8676
Mediatek mt8678
Mediatek mt8695
Mediatek mt8698
Mediatek mt8755
Mediatek mt8775
Mediatek mt8792
Mediatek mt8796
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 07 Oct 2024 02:45:00 +0000

Type Values Removed Values Added
Description In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.
Weaknesses CWE-787
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published:

Updated: 2024-10-07T13:41:34.047Z

Reserved: 2023-11-02T13:35:35.175Z

Link: CVE-2024-20100

cve-icon Vulnrichment

Updated: 2024-10-07T13:40:34.912Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-07T03:15:03.273

Modified: 2025-04-25T18:36:53.990

Link: CVE-2024-20100

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses