6.7
Medium
CVE-2024-20023 In flashc, there is a possible out of bounds write due to lack of valudation
Description
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2713 | Versions not published | |
| mt2737 | Versions not published | |
| mt6781 | Versions not published | |
| mt6789 | Versions not published | |
| mt6835 | Versions not published | |
| mt6855 | Versions not published | |
| mt6879 | Versions not published | |
| mt6880 | Versions not published | |
| mt6886 | Versions not published |
Show the 20 other branches Hide the 20 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6890 | Versions not published | |
| mt6895 | Versions not published | |
| mt6980 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| mt8188 | Versions not published | |
| mt8188t | Versions not published | |
| mt8370 | Versions not published | |
| mt8390 | Versions not published | |
| mt8673 | Versions not published | |
| mt8676 | Versions not published | |
| mt8678 | Versions not published | |
| Android | 14.0 | No fix stated |
| Android | 13.0 | No fix stated |
| Android | 12.0 | No fix stated |
| OpenWRT | 21.02 | No fix stated |
| OpenWRT | 19.07 | No fix stated |
| MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8188T, MT8370, MT8390, MT8673, MT8676, MT8678 | Versions not published |
Other CVEs of mt2713
The 16 CVEs of mt2713 →
CVE-2024-20053
In flashc, there is a possible out of bounds write due to an uncaught exception
8.4
High
CVE-2024-20048
In flashc, there is a possible information disclosure due to an uncaught exception
6.2
Medium
CVE-2024-20041
In da, there is a possible out of bounds read due to a missing bounds check
4.4
Medium
CVE-2024-20040
In wlan firmware, there is a possible out of bounds write due to improper input validation
8.8
High