6.7
Medium
CVE-2024-20131 In Modem, there is a possible escalation of privilege due to an incorrect bounds check
Description
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mt2737 | Versions not published | |
| mt2739 | Versions not published | |
| mt6789 | Versions not published | |
| mt6813 | Versions not published | |
| mt6815 | Versions not published | |
| mt6835 | Versions not published | |
| mt6835t | Versions not published | |
| mt6855 | Versions not published | |
| mt6878 | Versions not published |
Show the 23 other branches Hide the 23 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| mt6878t | Versions not published | |
| mt6879 | Versions not published | |
| mt6886 | Versions not published | |
| mt6895 | Versions not published | |
| mt6895t | Versions not published | |
| mt6896 | Versions not published | |
| mt6897 | Versions not published | |
| mt6899 | Versions not published | |
| mt6980 | Versions not published | |
| mt6980d | Versions not published | |
| mt6983 | Versions not published | |
| mt6985 | Versions not published | |
| mt6986 | Versions not published | |
| mt6986d | Versions not published | |
| mt6988 | Versions not published | |
| mt6989 | Versions not published | |
| mt6990 | Versions not published | |
| mt6991 | Versions not published | |
| mt8673 | Versions not published | |
| mt8676 | Versions not published | |
| mt8795t | Versions not published | |
| mt8798 | Versions not published | |
| MT2737, MT2739, MT6789, MT6813, MT6815, MT6835, MT6835T, MT6855, MT6878, MT6878T, MT6879, MT6886, MT6895, MT6895T, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6985, MT6986, MT6986D, MT6988, MT6989, MT6990, MT6991, MT8673, MT8676, MT8795T, MT8798 | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of mt2737
The 12 CVEs of mt2737 →
CVE-2024-20139
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions
6.5
Medium
CVE-2024-20136
In da, there is a possible out of bounds read due to a missing bounds check
6.2
Medium
CVE-2024-20132
In Modem, there is a possible out of bonds write due to a mission bounds check
6.7
Medium
CVE-2024-20082
In Modem, there is a possible memory corruption due to a missing bounds check
9.8
Critical