CVE-2024-20102: Input Validation

Published Oct 7, 2024

Updated

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601.

Affected Software

10 affected components

All of the following

Any of the following

Google Android=13.0

Google Android=14.0

Any of the following

MediaTek Mt3605

MediaTek Mt6985

MediaTek Mt6989

MediaTek Mt6990

MediaTek Mt7927

MediaTek Mt8678

MediaTek Mt8796

MediaTek Mt8893

Event History

Oct 7, 2024

CVE Published

via MITRE·02:35 AM

Data Sourced

via MITRE·02:35 AM

DescriptionWeakness

Data Sourced

via NVD·03:15 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2024-20102?

The severity of CVE-2024-20102 is critical as it involves a possible out of bounds read that can lead to remote information disclosure.

How do I fix CVE-2024-20102?

To fix CVE-2024-20102, you should apply the recommended patch ID ALPS08998892 as soon as possible.

What are the affected versions for CVE-2024-20102?

CVE-2024-20102 affects Google Android versions 13.0 and 14.0.

Does CVE-2024-20102 require user interaction for exploitation?

No, CVE-2024-20102 does not require user interaction for exploitation.

What type of vulnerability is CVE-2024-20102 classified as?

CVE-2024-20102 is classified as an out of bounds read vulnerability due to improper input validation in the wlan driver.