Lucene search
HistoryApr 01, 2024 - 3:15 a.m.
CVE-2024-20040
cve-2024-20040
improper input validation
remote escalation of privilege
patch id
mt6xxx chipsets
mt79xx chipsets
issue id
msv-979
nvd
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.
Affected configurations
Node
googleandroidRange<12.0
ORgoogleandroidRange<13.0
ORgoogleandroidRange<14.0
mediatekmt2713
ORmediatekmt6580
ORmediatekmt6761
ORmediatekmt6762
ORmediatekmt6768
ORmediatekmt6781
ORmediatekmt6789
ORmediatekmt6833
ORmediatekmt6853
ORmediatekmt6853t
ORmediatekmt6855
ORmediatekmt6873
ORmediatekmt6875
ORmediatekmt6877
ORmediatekmt6879
ORmediatekmt6883
ORmediatekmt6885
ORmediatekmt6886
ORmediatekmt6889
ORmediatekmt6890
ORmediatekmt6891
ORmediatekmt6893
ORmediatekmt6895
ORmediatekmt6983
ORmediatekmt6985
ORmediatekmt6989
ORmediatekmt6990
ORmediatekmt7902
ORmediatekmt7915
ORmediatekmt7916
ORmediatekmt7920
ORmediatekmt7921
ORmediatekmt7922
ORmediatekawus036nh
ORmediatekawus036nh
ORmediatekmt7981
ORmediatekmt7986
ORmediatekmt8188
ORmediatekmt8195
ORmediatekawus036nh
ORmediatekmt8390
ORmediatekmt8395
ORmediatekmt8518s
ORmediatekmt8532
ORmediatekmt8673
ORmediatekawus036nh
ORmediatekmt8781
ORmediatekmt8791t
ORmediatekmt8792
ORmediatekmt8796
ORmediatekmt8797
ORmediatekmt8798
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt2713 | * | cpe:2.3:h:mediatek:mt2713:*:*:*:*:*:*:*:* |
| mediatek | mt6580 | * | cpe:2.3:h:mediatek:mt6580:*:*:*:*:*:*:*:* |
| mediatek | mt6761 | * | cpe:2.3:h:mediatek:mt6761:*:*:*:*:*:*:*:* |
| mediatek | mt6762 | * | cpe:2.3:h:mediatek:mt6762:*:*:*:*:*:*:*:* |
| mediatek | mt6768 | * | cpe:2.3:h:mediatek:mt6768:*:*:*:*:*:*:*:* |
| mediatek | mt6781 | * | cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:* |
| mediatek | mt6789 | * | cpe:2.3:h:mediatek:mt6789:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "MediaTek, Inc.",
"product": "MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798",
"versions": [
{
"version": "Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2024-20040
2024-04-01 03:15:07
cvelist
cvelist
CVE-2024-20040
2024-04-01 02:34:53
vulnrichment
vulnrichment
CVE-2024-20040
2024-04-01 02:34:53