7.5

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mediatek ≫ Software Development Kit Version <= 3.3
   Mediatek ≫ Mt3605 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8195 Version -
   Mediatek ≫ Mt8370 Version -
   Mediatek ≫ Mt8390 Version -
Google ≫ Android Version 13.0
   Mediatek ≫ Mt3605 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8195 Version -
   Mediatek ≫ Mt8370 Version -
   Mediatek ≫ Mt8390 Version -
Google ≫ Android Version 14.0
   Mediatek ≫ Mt3605 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8195 Version -
   Mediatek ≫ Mt8370 Version -
   Mediatek ≫ Mt8390 Version -
Google ≫ Android Version 15.0
   Mediatek ≫ Mt3605 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8195 Version -
   Mediatek ≫ Mt8370 Version -
   Mediatek ≫ Mt8390 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.197
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/December-2024
Vendor Advisory