PT-2024-18622 · Mediatek+3 · Mt2737+31

Published 2024-12-02 · Updated 2024-12-02 · CVE-2024-20136

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description There is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-20136

Affected Products

Mt2737

Android

Mt6781

Mt6789

Mt6855

Mt6878

Mt6879

Mt6880

Mt6886

Mt6890

Mt6895

Mt6897

Mt6980

Mt6983

Mt6985

Mt6989

Mt6990

Mt8195

Mt8370

Mt8390

Mt8673

Mt8676

Mt8678

Mt8755

Mt8775

Mt8781

Mt8795T

Mt8796

Mt8798

Mt8893

Openwrt

Rdk-B

References · 6

• https://osv.dev/vulnerability/CVE-2024-20136 · Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/December-2024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20136 · Security Note
• https://twitter.com/CVEnew/status/1863425008866861136 · Twitter Post
• https://t.me/cvedetector/11745 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1863449555221586015 · Twitter Post