CVE-2024-20102: Input Validation
First published: Mon Oct 07 2024(Updated: )
In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Google Android | =13.0 | |
| Google Android | =14.0 | |
| Any of | ||
| Mediatek MT3605 | ||
| MediaTek MT6985T | ||
| MediaTek MT6989 | ||
| MediaTek MT6990 | ||
| MediaTek MT7927 | ||
| MediaTek MT8678 | ||
| MediaTek MT8796 | ||
| MediaTek MT8893 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-20102?
The severity of CVE-2024-20102 is critical as it involves a possible out of bounds read that can lead to remote information disclosure.
How do I fix CVE-2024-20102?
To fix CVE-2024-20102, you should apply the recommended patch ID ALPS08998892 as soon as possible.
What are the affected versions for CVE-2024-20102?
CVE-2024-20102 affects Google Android versions 13.0 and 14.0.
Does CVE-2024-20102 require user interaction for exploitation?
No, CVE-2024-20102 does not require user interaction for exploitation.
What type of vulnerability is CVE-2024-20102 classified as?
CVE-2024-20102 is classified as an out of bounds read vulnerability due to improper input validation in the wlan driver.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/event
- agent/last-modified-date
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/google
- canonical/google android
- version/google android/13.0
- version/google android/14.0
- vendor/mediatek
- canonical/mediatek mt3605
- canonical/mediatek mt6985t
- canonical/mediatek mt6989
- canonical/mediatek mt6990
- canonical/mediatek mt7927
- canonical/mediatek mt8678
- canonical/mediatek mt8796
- canonical/mediatek mt8893