CVE-2024-20147

EPSS 0.22%
Veröffentlicht 03.02.2025 04:15:07
Zuletzt bearbeitet 22.04.2025 13:50:37
Erkennungen
Login

In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389046 (Note: For MT79XX chipsets) / ALPS09136501 (Note: For MT2737, MT3603, MT6XXX, and MT8XXX chipsets); Issue ID: MSV-1797.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 8 VulnDex Vulnerability Enrichment 20

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linuxfoundation ≫ Yocto Version 3.3

   Mediatek ≫ Mt2737 Version -
   Mediatek ≫ Mt3603 Version -
   Mediatek ≫ Mt6835 Version -
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6886 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt7902 Version -
   Mediatek ≫ Mt7920 Version -
   Mediatek ≫ Mt7921 Version -
   Mediatek ≫ Mt7922 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8195 Version -
   Mediatek ≫ Mt8370 Version -
   Mediatek ≫ Mt8390 Version -
   Mediatek ≫ Mt8395 Version -
   Mediatek ≫ Mt8518s Version -
   Mediatek ≫ Mt8532 Version -
   Mediatek ≫ Mt8678 Version -

Linuxfoundation ≫ Yocto Version 4.0

Linuxfoundation ≫ Yocto Version 5.0

Mediatek ≫ Software Development Kit Version <= 3.5

Google ≫ Android Version 13.0

Google ≫ Android Version 14.0

Google ≫ Android Version 15.0

Openwrt ≫ Openwrt Version 23.05

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.119

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

https://corp.mediatek.com/product-security-bulletin/February-2025

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20147

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20147

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20147

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-20147