2024-06-03 04:03:30 +00:00
{
"id" : "CVE-2024-20066" ,
"sourceIdentifier" : "security@mediatek.com" ,
"published" : "2024-06-03T02:15:08.630" ,
2025-02-03 21:03:59 +00:00
"lastModified" : "2025-02-03T19:33:57.627" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-06-03 04:03:30 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477."
2024-06-03 16:03:31 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el m\u00f3dem, existe una posible escritura fuera de los l\u00edmites debido a una verificaci\u00f3n de los l\u00edmites incorrecta. Esto podr\u00eda provocar una denegaci\u00f3n remota de servicio sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: MOLY01267281; ID del problema: MSV-1477."
2024-06-03 04:03:30 +00:00
}
] ,
2025-02-03 21:03:59 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
2024-06-03 04:03:30 +00:00
"weaknesses" : [
{
"source" : "security@mediatek.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
2025-02-03 21:03:59 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2B763B71-F913-45B4-B91E-D7F0670C4315"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6298:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A2EABFE5-4B6F-446C-9DE7-008D47C09ED7"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B7122918-8C44-4F24-82E4-B8448247FC83"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "19A63103-C708-48EC-B44D-5E465A6B79C5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "855A8046-34ED-4891-ACE5-76AB10AC8D53"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6895t:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A97CE1E0-7B77-49BA-8D92-9AF031CD18FE"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "33DEF766-EAF1-4E36-BB7C-43069B26507A"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A7D8055-F4B6-41EE-A078-11D56285AB66"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2758122C-4D11-4D34-9B72-3905F3A28448"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6986d:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "68AA1CF7-F1CB-44A0-980E-DB32D9E379B9"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1A76806D-A4E3-466A-90CB-E9FFE478E7A0"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CBBB30DF-E963-4940-B742-F6801F68C3FC"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
}
]
}
]
2024-06-03 04:03:30 +00:00
}
] ,
"references" : [
{
"url" : "https://corp.mediatek.com/product-security-bulletin/June-2024" ,
2025-02-03 21:03:59 +00:00
"source" : "security@mediatek.com" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://corp.mediatek.com/product-security-bulletin/June-2024" ,
2025-02-03 21:03:59 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2024-06-03 04:03:30 +00:00
}
]
}
