4.4

CVE-2024-20071

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364733; Issue ID: MSV-1331.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mediatek ≫ Software Development Kit Version <= 5.0.5.0
   Mediatek ≫ Mt6890 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7622 Version -
Openwrt ≫ Openwrt Version 19.07.0 Update -
   Mediatek ≫ Mt6890 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7622 Version -
Openwrt ≫ Openwrt Version 21.02.0 Update -
   Mediatek ≫ Mt6890 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7622 Version -
Openwrt ≫ Openwrt Version 23.05
   Mediatek ≫ Mt6890 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7622 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/June-2024
Vendor Advisory