CVE-2024-20101: Input Validation
Published Oct 7, 2024
·Updated
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602.
Affected Software
20 affected components
Google Android
All of the following
Any of the following
MediaTek Software Development Kit<=3.3
Google Android=13.0
Google Android=14.0
Google Android=15.0
Any of the following
MediaTek Mt3605
MediaTek Mt6985
MediaTek Mt6989
MediaTek Mt6990
MediaTek Mt7927
MediaTek Mt8183
MediaTek Mt8512
MediaTek Mt8676
MediaTek Mt8678
MediaTek Mt8695
MediaTek Mt8698
MediaTek Mt8755
MediaTek Mt8775
MediaTek Mt8792
MediaTek Mt8796
Event History
Oct 7, 2024
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·02:35 AM
Data Sourced
via MITRE·02:35 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-20101?
The severity of CVE-2024-20101 is critical due to the potential for remote code execution without user interaction.
2
How do I fix CVE-2024-20101?
To fix CVE-2024-20101, apply the patch with ID ALPS08998901 provided by the vendor.
3
Which software is affected by CVE-2024-20101?
CVE-2024-20101 affects Google Android operating systems.
4
What is the nature of the vulnerability in CVE-2024-20101?
CVE-2024-20101 is an out-of-bounds write vulnerability due to improper input validation in the wlan driver.
5
Is user interaction required to exploit CVE-2024-20101?
No, user interaction is not needed to exploit CVE-2024-20101.