CVE-2024-20068

CVE-2024-20068

Vendor Mediatek, Inc.

Product MT6298, MT6813, MT6815, MT6835, MT6878, MT6879, MT6895, MT6895T, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6986, MT6986D, MT6990, MT6991, MT8673, MT8675, MT8771, MT8791T, MT8792, MT8797, MT8798

Weakness CWE-787

Published June 3, 2024

Last update November 21, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01270721; Issue ID: MSV-1479.

Key dates

02Disclosure timeline

June 3, 2024 CVE published

November 21, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-20068 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/787.html

Related vulnerabilities

Identifiers

CVE CVE-2024-20068

CWE CWE-787

Affected versions

Vendor Mediatek, Inc.

Affected Modem NR16, NR17

01Description

02Disclosure timeline

03References

04Related CVE