Skip to content
fr Sign in
7.5 High

CVE-2024-20003 In Modem NL1, there is a possible system crash due to an improper input validation

Description

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981).

Affected products and versions

Product Affected versions Fixed in
mt6875t Versions not published
mt2735 Versions not published
mt6297 Versions not published
mt6833 Versions not published
mt6853 Versions not published
mt6855 Versions not published
mt6873 Versions not published
mt6875 Versions not published
mt6877 Versions not published
Show the 12 other branches
Product Affected versions Fixed in
mt6880 Versions not published
mt6883 Versions not published
mt6885 Versions not published
mt6889 Versions not published
mt6890 Versions not published
mt6891 Versions not published
mt6893 Versions not published
mt8675 Versions not published
mt8791 Versions not published
mt8791t Versions not published
mt8797 Versions not published
MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of mt6875t

The 6 CVEs of mt6875t →
CVE-2024-20094 In Modem, there is a possible system crash due to a missing bounds check 7.5 High CVE-2024-20082 In Modem, there is a possible memory corruption due to a missing bounds check 9.8 Critical CVE-2024-20069 In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade… 6.5 Medium CVE-2023-32845 In 5G Modem, there is a possible system crash due to improper error handling Not rated
Track this CVE