CVE-2024-20148

🗓️ 06 Jan 2025 03:17:51Reported by MediaTekType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 136 Views

Possible out of bounds write in wlan STA FW could allow remote code execution without user interaction.

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2024-20148	6 Jan 202504:15	–	attackerkb
androidsecurity	Android Security Bulletin-January 2025Stay organized with collectionsSave and categorize content based on your preferences.	6 Jan 202500:00	–	androidsecurity
circl	CVE-2024-20148	6 Jan 202503:47	–	circl
cnnvd	MediaTek Chipsets 安全漏洞	6 Jan 202500:00	–	cnnvd
cvelist	CVE-2024-20148	6 Jan 202503:17	–	cvelist
ncsc	Vulnerabilities fixed in Google Android and Samsung Mobile	7 Jan 202512:54	–	ncsc
nvd	CVE-2024-20148	6 Jan 202504:15	–	nvd
osv	ASB-A-376814212	1 Jan 202500:00	–	osv
osv	CVE-2024-20148	6 Jan 202504:15	–	osv
ptsecurity	PT-2025-2277 · Unknown · Wlan Sta Fw	6 Jan 202500:00	–	ptsecurity

NVD

Vulners

Node

AND

linuxfoundation yoctoMatch3.3

linuxfoundation yoctoMatch4.0

linuxfoundation yoctoMatch5.0

mediatek software_development_kitRange≤2.4

google androidMatch13.0

google androidMatch14.0

google androidMatch15.0

mediatek mt3603Match-

mediatek mt6835Match-

mediatek mt6878Match-

mediatek mt6886Match-

mediatek mt6897Match-

mediatek mt7902Match-

mediatek mt7920Match-

mediatek mt7922Match-

mediatek mt8518sMatch-

mediatek mt8532Match-

mediatek mt8766Match-

mediatek mt8768Match-

mediatek mt8775Match-

mediatek mt8796Match-

mediatek mt8798Match-

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8766, MT8768, MT8775, MT8796, MT8798",
    "versions": [
      {
        "version": "Android 13.0, 14.0, 15.0 / SDK release 2.4 and before / Yocto 3.3, 4.0, 5.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/January-2025

17 Jun 2026 07:06Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

EPSS0.00259

SSVC

CWE-787