Paper/Archive/CVE-2024-20067

CVE-2024-20067

MediaTek, Inc. MT6813, MT6815, MT6835, MT6878, MT6897, MT6899, MT6986, MT6986D, MT6991, MT8792 — In modem, there is a possible out of bounds write due to improper input invalidation.

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 54.1.541 × 2010.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462.

Affected

ProductAffectedFixed inSource

MT6813, MT6815, MT6835, MT6878, MT6897, MT6899, MT6986, MT6986D, MT6991, MT8792Modem NR17, NR17R–CNA

mt6813-–CISA-ADP

mt6815-–CISA-ADP

mt6835-–CISA-ADP

mt6878-–CISA-ADP

mt6897-–CISA-ADP

mt6899-–CISA-ADP

mt6986-–CISA-ADP

mt6986d-–CISA-ADP

mt6991-–CISA-ADP

mt8792-–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcorp.mediatek.com/product-security-bulletin/June-2024