CVE-2024-20133: Medium severity mediatek nr16 vulnerability
Published Dec 2, 2024
·Updated
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.
Affected Software
12 affected components
All of the following
MediaTek Nr16
Any of the following
MediaTek Mt6879
MediaTek Mt6886
MediaTek Mt6895
MediaTek Mt6895t
MediaTek Mt6896
MediaTek Mt6980
MediaTek Mt6983
MediaTek Mt8673
MediaTek Mt8676
MediaTek Mt8795t
MediaTek Mt8798
Event History
Dec 2, 2024
CVE Published
via MITRE·03:07 AM
Data Sourced
via MITRE·03:07 AM
DescriptionWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-20133?
CVE-2024-20133 has a high severity level due to possible escalation of privilege.
2
How do I fix CVE-2024-20133?
To mitigate CVE-2024-20133, you should apply the patch ID MOLY01395886.
3
What devices are affected by CVE-2024-20133?
CVE-2024-20133 affects devices using MediaTek NR16 chipset.
4
Is user interaction required for exploiting CVE-2024-20133?
No, user interaction is not needed to exploit CVE-2024-20133.
5
What could be the impact of exploiting CVE-2024-20133?
Exploiting CVE-2024-20133 could lead to local escalation of privilege with System execution privileges.