8.8
High
CVE-2024-20040 In wlan firmware, there is a possible out of bounds write due to improper input validation
Description
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6768 | Versions not published | |
| mt6781 | Versions not published | |
| mt2713 | Versions not published | |
| mt6580 | Versions not published | |
| mt6761 | Versions not published | |
| mt6762 | Versions not published | |
| mt6789 | Versions not published | |
| mt6833 | Versions not published | |
| mt6853 | Versions not published |
Show the 41 other branches Hide the 41 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6853t | Versions not published | |
| mt6855 | Versions not published | |
| mt6873 | Versions not published | |
| mt6875 | Versions not published | |
| mt6877 | Versions not published | |
| mt6879 | Versions not published | |
| mt6883 | Versions not published | |
| mt6885 | Versions not published | |
| mt6886 | Versions not published | |
| mt6889 | Versions not published | |
| mt6890 | Versions not published | |
| mt6891 | Versions not published | |
| mt6893 | Versions not published | |
| mt6895 | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| mt7902 | Versions not published | |
| mt7915 | Versions not published | |
| mt7916 | Versions not published | |
| mt7920 | Versions not published | |
| mt7921 | Versions not published | |
| mt7922 | Versions not published | |
| mt7925 | Versions not published | |
| mt7927 | Versions not published | |
| mt7981 | Versions not published | |
| mt7986 | Versions not published | |
| mt8188 | Versions not published | |
| mt8195 | Versions not published | |
| mt8370 | Versions not published | |
| mt8390 | Versions not published | |
| mt8395 | Versions not published | |
| mt8518s | Versions not published | |
| mt8532 | Versions not published | |
| mt8673 | Versions not published | |
| Android | 14.0 | No fix stated |
| Android | 13.0 | No fix stated |
| Android | 12.0 | No fix stated |
| linux_kernel | 4.19 | No fix stated |
| MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7... | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt6768
The 82 CVEs of mt6768 →
CVE-2024-20116
In cmdq, there is a possible out of bounds read due to a missing bounds check
4.4
Medium
CVE-2024-20135
In soundtrigger, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20130
In power, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20127
In Telephony, there is a possible out of bounds read due to a missing bounds check
7.5
High