CVE-2024-20138

No fix known EPSS <1%CVSS 7.5

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.

Published 2024-12-02 · CVE record · OSV

Products: MediaTek, Inc. MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8195, MT8370, MT8390, mediatek mt3605, mediatek mt6985, mediatek mt6989, mediatek mt6990, mediatek mt7925, mediatek mt7927, mediatek mt8195, mediatek mt8370, mediatek mt8390