Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-20152 EUVD-2024-17867GHSA-88jr-vqf8-xrxx

In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service …

Published Jan 6, 2025 · Updated Jan 6, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990, MT7902, MT7920, MT7922, MT8365, MT8518S, MT8532, MT8666, MT8667, MT8673, MT8755, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT879

Description

In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue ID: MSV-1798.

Affected products

VendorProductAffectedFixed
MediaTek MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8755, MT8766, MT8768, MT8775, MT8781, MT8796, MT8798, MT8893 Android 13.0, 14.0, 15.0 / SDK release 2.4 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0 —

References