Skip to content
OpenAdvisories
High · 8.8 CVE-2024-20039 EUVD-2024-17754GHSA-v67q-hfx9-pxhf

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no …

Published Apr 1, 2024 · Updated Aug 1, 2024 · Assigned by MediaTek

Description

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.

Affected products

VendorProductAffectedFixed
MediaTek MT2731, MT2735, MT2737, MT3967, MT6297, MT6298, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, M Modem LR12A, LR13, NR15, NR16, NR17 —

Advisories 1

References