Skip to content
OpenAdvisories
High · 7.5 CVE-2024-20138 EUVD-2024-17853GHSA-2c5p-v6r6-q8xj

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure wi…

Published Dec 2, 2024 · Updated Dec 2, 2024 · Assigned by MediaTek

Description

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.

Affected products

VendorProductAffectedFixed
MediaTek MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8195, MT8370, MT8390 Android 13.0, 14.0, 15.0 / SDK release 3.3 and before —

References