CVE-2024-20100

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/October-2024	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:mediatek:iot_yocto:24.0:::::::*
	cpe:2.3:a:mediatek:software_development_kit::::::::
	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*

OR	cpe:2.3:h:mediatek:mt3605:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt7927:-:::::::*
	cpe:2.3:h:mediatek:mt8183:-:::::::*
	cpe:2.3:h:mediatek:mt8365:-:::::::*
	cpe:2.3:h:mediatek:mt8512:-:::::::*
	cpe:2.3:h:mediatek:mt8676:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*
	cpe:2.3:h:mediatek:mt8695:-:::::::*
	cpe:2.3:h:mediatek:mt8698:-:::::::*
	cpe:2.3:h:mediatek:mt8755:-:::::::*
	cpe:2.3:h:mediatek:mt8775:-:::::::*
	cpe:2.3:h:mediatek:mt8792:-:::::::*
	cpe:2.3:h:mediatek:mt8796:-:::::::*

History

No history.

Information

Published : 2024-10-07 03:15

Updated : 2025-04-25 18:36

NVD link : CVE-2024-20100

Mitre link : CVE-2024-20100

CVE.ORG link : CVE-2024-20100

JSON object : View

Products Affected

mediatek

mt8676
mt6985
mt6990
mt8695
iot_yocto
mt8365
mt8755
mt8698
mt8183
mt8792
mt8512
mt3605
mt7927
mt6989
mt8775
mt8678
software_development_kit
mt8796

google

android

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2024-20100", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-10-07T03:15:03.273", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/October-2024", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603."}, {"lang": "es", "value": "En el controlador WLAN, existe una posible escritura fuera de los l\u00edmites debido a una validaci\u00f3n de entrada incorrecta. Esto podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS08998449; ID de problema: MSV-1603."}], "lastModified": "2025-04-25T18:36:53.990", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mediatek:iot_yocto:24.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21917FFD-A4EA-43A2-BE2C-FB9B24ECDDB4"}, {"criteria": "cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "717EE6D8-BCB9-4F8B-AC18-5B2CD6F847CC", "versionEndIncluding": "3.3"}, {"criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"}, {"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"}, {"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F897E19-008E-4DC8-B4CB-BF27044B9F5C"}, {"criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"}, {"criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255"}, {"criteria": "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"}, {"criteria": "cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "05525018-AFE0-415C-A71C-A77922C7D637"}, {"criteria": "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23F65D7B-31A1-4D94-82E9-254A7A6D7BE1"}, {"criteria": "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"}, {"criteria": "cpe:2.3:h:mediatek:mt8512:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E51B721-CBDD-4223-ACD1-509E82D1B4A2"}, {"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78"}, {"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"}, {"criteria": "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"}, {"criteria": "cpe:2.3:h:mediatek:mt8698:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0A8B1C43-5770-440F-8015-3BBBD7AF8386"}, {"criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F"}, {"criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF"}, {"criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52"}, {"criteria": "cpe:2.3:h:mediatek:mt8796:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE933AD9-3A6F-421B-8AB3-C45F8DEA9548"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}