CVE-2024-20094 - AskarLabs CVE Database

CVE-2024-20094

Vendor Mediatek, Inc.

Product MT2735, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797

Weakness CWE-617

Published October 7, 2024

Last update October 7, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.

Key dates

02Disclosure timeline

October 7, 2024 CVE published

October 7, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-20094 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/617.html

Identifiers

CVE CVE-2024-20094

CWE CWE-617

Affected versions

Vendor Mediatek, Inc.

Product MT2735, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797

Affected Modem NR15