CVE-2024-20071 - AskarLabs CVE Database

CVE-2024-20071

Vendor Mediatek, Inc.

Product MT6890, MT6990, MT7622

Weakness CWE-125

Published June 3, 2024

Last update October 29, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364733; Issue ID: MSV-1331.

Key dates

02Disclosure timeline

June 3, 2024 CVE published

October 29, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-20071 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/125.html

Related vulnerabilities

04Related CVE

CVE-2022-44498 Adobe Illustrator Out-of-Bound Read Memory leak CVE-2025-5941 Out-of-Bounds Read Vulnerability in Netskope Client CVE-2021-28590 Adobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2025-61841 Format Plugins | Out-of-bounds Read (CWE-125) CVE-2025-54190 Substance3D - Painter | Out-of-bounds Read (CWE-125)