9.8
Critical
CVE-2024-20082 In Modem, there is a possible memory corruption due to a missing bounds check
Description
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594; Issue ID: MSV-1529.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2735 | Versions not published | |
| mt2737 | Versions not published | |
| mt6833 | Versions not published | |
| mt6835 | Versions not published | |
| mt6835t | Versions not published | |
| mt6853 | Versions not published | |
| mt6855 | Versions not published | |
| mt6873 | Versions not published | |
| mt6875 | Versions not published |
Show the 22 other branches Hide the 22 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6875t | Versions not published | |
| mt6877 | Versions not published | |
| mt6879 | Versions not published | |
| mt6880 | Versions not published | |
| mt6883 | Versions not published | |
| mt6885 | Versions not published | |
| mt6886 | Versions not published | |
| mt6889 | Versions not published | |
| mt6890 | Versions not published | |
| mt6891 | Versions not published | |
| mt6893 | Versions not published | |
| mt6895 | Versions not published | |
| mt6895t | Versions not published | |
| mt6896 | Versions not published | |
| mt6897 | Versions not published | |
| mt6980 | Versions not published | |
| mt6980d | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| MT2735, MT2737, MT6833, MT6835, MT6835T, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983, MT6985, MT6989, MT6990 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2735
The 13 CVEs of mt2735 →
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check
7.5
High
CVE-2024-20081
In gnss service, there is a possible out of bounds write due to improper input validation
9.8
Critical
CVE-2024-20080
In gnss service, there is a possible escalation of privilege due to improper certificate validation
9.8
Critical
CVE-2024-20003
In Modem NL1, there is a possible system crash due to an improper input validation
7.5
High