In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/March-2024 | Vendor Advisory |
| https://corp.mediatek.com/product-security-bulletin/March-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Apr 2025, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mediatek mt7615
Mediatek software Development Kit Mediatek |
|
| References | () https://corp.mediatek.com/product-security-bulletin/March-2024 - Vendor Advisory | |
| CPE | cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:* |
27 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 |
21 Nov 2024, 08:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://corp.mediatek.com/product-security-bulletin/March-2024 - |
27 Aug 2024, 21:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
04 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-04 03:15
Updated : 2025-04-22 20:36
NVD link : CVE-2024-20018
Mitre link : CVE-2024-20018
CVE.ORG link : CVE-2024-20018
JSON object : View
Products Affected
mediatek
- software_development_kit
- mt7615
CWE
CWE-787
Out-of-bounds Write