CVE-2024-20017

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132...

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

A critical security flaw has been disclosed in the Microchip Advanced Software Framework ASF that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2024-7490, carries a CVSS score of 9.5 out of a maximum of 10.0. It has been described as a...

Exploit for Improper Input Validation in Mediatek Software_Development_Kit

cve-2024-20017 exploits NOTE: the x8664 exploits...

CVE-2024-20017

CVE-2024-20017 affects MediaTek Wi‑Fi chipsets via the wappd/wlan path, where an out-of-bounds write caused by insufficient input validation can enable remote code execution without user interaction. The issue is observed in MediaTek’s wappd, with public reports indicating affected firmware/SDK v...