CVE-2024-20102

CVE-2024-20102

Vendor Mediatek, Inc.
Product MT3605, MT6985, MT6989, MT6990, MT7927, MT8678, MT8796, MT8893
Weakness CWE-125
Published October 7, 2024
Last update March 13, 2025

CVSS base score

What the vulnerability does

01Description

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601.

Key dates

02Disclosure timeline

October 7, 2024 CVE published
March 13, 2025 Record updated