← Back

CVE-2024-20102

nvd nist
Published: Oct 7, 2024Modified: Mar 13, 2025

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601.

Affected (2)

Products: Google: Android
Google
1 product
Android
Configuration A
2 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Google
Android
Version 13.0
Android
Version 14.0
Running on/withPlatform Versions
Mediatek
Mt3605
All versions
Mediatek
Mt6985
All versions
Mediatek
Mt6989
All versions
Mediatek
Mt6990
All versions
Mediatek
Mt7927
All versions
Mediatek
Mt8678
All versions
Mediatek
Mt8796
All versions
Mediatek
Mt8893
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.