CVE-2024-20040

🗓️ 01 Apr 2024 02:34:53Reported by MediaTekType

Possible out of bounds write in wlan firmware can lead to remote privilege escalation without user interaction

Reporter	Title	Published	Views	Family All 10
Android Security Bulletins	Android Security Bulletin—April 2024Stay organized with collectionsSave and categorize content based on your preferences.	1 Apr 202400:00	–	androidsecurity
CNNVD	MediaTek 芯片安全漏洞	1 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-20040	1 Apr 202402:34	–	cvelist
EUVD	EUVD-2024-17755	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	2 Apr 202400:00	–	ncsc
NVD	CVE-2024-20040	1 Apr 202403:15	–	nvd
OSV	ASB-A-323465955	1 Apr 202400:00	–	osv
OSV	CVE-2024-20040	1 Apr 202403:15	–	osv
RedhatCVE	CVE-2024-20040	23 May 202508:58	–	redhatcve
Vulnrichment	CVE-2024-20040	1 Apr 202402:34	–	vulnrichment

NVD

Vulners

Node

linuxfoundation yoctoMatch3.3

linuxfoundation yoctoMatch4.0

rdkcentral rdk-bMatch2022q3

google androidMatch12.0

google androidMatch13.0

google androidMatch14.0

linux linux_kernelMatch4.19-

openwrt openwrtMatch19.07.0-

openwrt openwrtMatch21.02.0-

AND

mediatek mt2713Match-

mediatek mt6580Match-

mediatek mt6761Match-

mediatek mt6762Match-

mediatek mt6768Match-

mediatek mt6781Match-

mediatek mt6789Match-

mediatek mt6833Match-

mediatek mt6853Match-

mediatek mt6853tMatch-

mediatek mt6855Match-

mediatek mt6873Match-

mediatek mt6875Match-

mediatek mt6877Match-

mediatek mt6879Match-

mediatek mt6883Match-

mediatek mt6885Match-

mediatek mt6886Match-

mediatek mt6889Match-

mediatek mt6890Match-

mediatek mt6891Match-

mediatek mt6893Match-

mediatek mt6895Match-

mediatek mt6983Match-

mediatek mt6985Match-

mediatek mt6989Match-

mediatek mt6990Match-

mediatek mt7902Match-

mediatek mt7915Match-

mediatek mt7916Match-

mediatek mt7920Match-

mediatek mt7921Match-

mediatek mt7922Match-

mediatek mt7925Match-

mediatek mt7927Match-

mediatek mt7981Match-

mediatek mt7986Match-

mediatek mt8188Match-

mediatek mt8195Match-

mediatek mt8370Match-

mediatek mt8390Match-

mediatek mt8395Match-

mediatek mt8518sMatch-

mediatek mt8532Match-

mediatek mt8673Match-

mediatek mt8678Match-

mediatek mt8781Match-

mediatek mt8791tMatch-

mediatek mt8792Match-

mediatek mt8796Match-

mediatek mt8797Match-

mediatek mt8798Match-

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2713, MT6580, MT6761, MT6762, MT6768, MT6781, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT6989, MT6990, MT7902, MT7915, MT7916, MT7920, MT7921, MT7922, MT7925, MT7927, MT7981, MT7986, MT8188, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8673, MT8678, MT8781, MT8791T, MT8792, MT8796, MT8797, MT8798",
    "versions": [
      {
        "version": "Android 12.0, 13.0, 14.0 / Linux 4.19 / Yocto 3.3, 4.0 / OpenWrt 19.07, 21.02 / RDK-B 22Q3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/April-2024

23 Apr 2025 13:48Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.8

EPSS0.00456

SSVC

CWE-787