CVE-2024-20139 - Vulnerability Details

Vendors	Products
Mediatek	Mt2737 Mt3605 Mt6985 Mt6989 Mt6990 Mt7925 Mt7927 Mt8518s Mt8532 Mt8678

Link	Providers
https://corp.mediatek.com/product-security-bulletin/December-2024

Type	Values Removed	Values Added
First Time appeared		Mediatek Mediatek mt2737 Mediatek mt3605 Mediatek mt6985 Mediatek mt6989 Mediatek mt6990 Mediatek mt7925 Mediatek mt7927 Mediatek mt8518s Mediatek mt8532 Mediatek mt8678
CPEs		cpe:2.3:h:mediatek:mt2737:-:::::::* cpe:2.3:h:mediatek:mt3605:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt7925:-:::::::* cpe:2.3:h:mediatek:mt7927:-:::::::* cpe:2.3:h:mediatek:mt8518s:-:::::::* cpe:2.3:h:mediatek:mt8532:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::*
Vendors & Products		Mediatek Mediatek mt2737 Mediatek mt3605 Mediatek mt6985 Mediatek mt6989 Mediatek mt6990 Mediatek mt7925 Mediatek mt7927 Mediatek mt8518s Mediatek mt8532 Mediatek mt8678
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600.
Weaknesses		CWE-617
References		https://corp.mediatek.com/product-security-bulletin/December-2024

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20139", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2023-11-02T13:35:35.183Z", "datePublished": "2024-12-02T03:07:17.028Z", "dateUpdated": "2024-12-02T15:47:09.716Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2024-12-02T03:07:17.028Z"}, "descriptions": [{"lang": "en", "value": "In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678", "versions": [{"version": "Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}]}, "adp": [{"affected": [{"vendor": "mediatek", "product": "mt2737", "cpes": ["cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt3605", "cpes": ["cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt6985", "cpes": ["cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt6989", "cpes": ["cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt6990", "cpes": ["cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt7925", "cpes": ["cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt7927", "cpes": ["cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt8518s", "cpes": ["cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt8532", "cpes": ["cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "mediatek", "product": "mt8678", "cpes": ["cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-12-02T15:46:48.278309Z", "id": "CVE-2024-20139", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T15:47:09.716Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-20139 (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

state : PUBLISHED (string)

assignerShortName : MediaTek (string)

dateReserved : 2023-11-02T13:35:35.183Z (string)

datePublished : 2024-12-02T03:07:17.028Z (string)

dateUpdated : 2024-12-02T15:47:09.716Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2024-12-02T03:07:17.028Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600. (string)

}

]

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678 (string)

versions : [ »

0 : { »

version : Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0 (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/December-2024 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

cweId : CWE-617 (string)

description : CWE-617 Reachable Assertion (string)

}

]

}

]

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : mediatek (string)

product : mt2737 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : mediatek (string)

product : mt3605 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

2 : { »

vendor : mediatek (string)

product : mt6985 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

3 : { »

vendor : mediatek (string)

product : mt6989 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

4 : { »

vendor : mediatek (string)

product : mt6990 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

5 : { »

vendor : mediatek (string)

product : mt7925 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

6 : { »

vendor : mediatek (string)

product : mt7927 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

7 : { »

vendor : mediatek (string)

product : mt8518s (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

8 : { »

vendor : mediatek (string)

product : mt8532 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

9 : { »

vendor : mediatek (string)

product : mt8678 (string)

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-12-02T15:46:48.278309Z (string)

id : CVE-2024-20139 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-02T15:47:09.716Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-20139", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-02T15:46:48.278309Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt2737", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt3605", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6985", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6989", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt6990", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7925", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt7927", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8518s", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8532", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*"], "vendor": "mediatek", "product": "mt8678", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T15:44:24.790Z"}}], "cna": {"affected": [{"vendor": "MediaTek, Inc.", "product": "MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678", "versions": [{"status": "affected", "version": "Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"}], "descriptions": [{"lang": "en", "value": "In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}], "providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2024-12-02T03:07:17.028Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20139", "state": "PUBLISHED", "dateUpdated": "2024-12-02T15:47:09.716Z", "dateReserved": "2023-11-02T13:35:35.183Z", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "datePublished": "2024-12-02T03:07:17.028Z", "assignerShortName": "MediaTek"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : ADJACENT_NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-20139 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-02T15:46:48.278309Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt2737 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt3605 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6985 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6989 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt6990 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7925 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt7927 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8518s:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8518s (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8532 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* (string)

]

vendor : mediatek (string)

product : mt8678 (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-02T15:44:24.790Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678 (string)

versions : [ »

0 : { »

status : affected (string)

version : Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0 (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/December-2024 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-617 (string)

description : CWE-617 Reachable Assertion (string)

}

]

}

]

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2024-12-02T03:07:17.028Z (string)

}

cveMetadata : { »

cveId : CVE-2024-20139 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-02T15:47:09.716Z (string)

dateReserved : 2023-11-02T13:35:35.183Z (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

datePublished : 2024-12-02T03:07:17.028Z (string)

assignerShortName : MediaTek (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600."}, {"lang": "es", "value": "En el firmware de Bluetooth, existe una posible confirmaci\u00f3n de firmware debido al manejo inadecuado de condiciones excepcionales. Esto podr\u00eda provocar una denegaci\u00f3n de servicio local sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS09001270; ID de problema: MSV-1600."}], "id": "CVE-2024-20139", "lastModified": "2024-12-02T16:15:08.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-12-02T04:15:06.247", "references": [{"source": "security@mediatek.com", "url": "https://corp.mediatek.com/product-security-bulletin/December-2024"}], "sourceIdentifier": "security@mediatek.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-617"}], "source": "security@mediatek.com", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600. (string)

}

1 : { »

lang : es (string)

value : En el firmware de Bluetooth, existe una posible confirmación de firmware debido al manejo inadecuado de condiciones excepcionales. Esto podría provocar una denegación de servicio local sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID de parche: ALPS09001270; ID de problema: MSV-1600. (string)

}

]

id : CVE-2024-20139 (string)

lastModified : 2024-12-02T16:15:08.770 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-12-02T04:15:06.247 (string)

references : [ »

0 : { »

source : security@mediatek.com (string)

url : https://corp.mediatek.com/product-security-bulletin/December-2024 (string)

}

]

sourceIdentifier : security@mediatek.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-617 (string)

}

]

source : security@mediatek.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object