5.9
Medium
CVE-2024-20019 In wlan driver, there is a possible memory leak due to improper input handling
Description
In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt7927 2023.11 | earliest → < 2023.11.10 | 2023.11.10 |
| mt7925 2023.11 | earliest → < 2023.11.10 | 2023.11.10 |
| MT7925, MT7927 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt7927
The 7 CVEs of mt7927 →
CVE-2024-20139
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions
6.5
Medium
CVE-2024-20138
In wlan driver, there is a possible out of bound read due to improper input validation
7.5
High
CVE-2024-20103
In wlan firmware, there is a possible out of bounds write due to improper input validation
9.8
Critical
CVE-2024-20101
In wlan driver, there is a possible out of bounds write due to improper input validation
9.8
Critical