CVE-2024-20149
HIGHDescription
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01231341 / MOLY01263331 / MOLY01233835; Issue ID: MSV-2165.
Is your site exposed to CVE-2024-20149?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| mediatek | lr12 |
| mediatek | lr13 |
| mediatek | nr15 |
| mediatek | nr16 |
| mediatek | nr17.r1 |
| mediatek | nr17.r2 |
| mediatek | mt2735 |
| mediatek | mt2737 |
| mediatek | mt6767 |
| mediatek | mt6768 |
| mediatek | mt6769 |
| mediatek | mt6769k |
| mediatek | mt6769s |
| mediatek | mt6769t |
| mediatek | mt6769z |
| mediatek | mt6779 |
| mediatek | mt6781 |
| mediatek | mt6783 |
| mediatek | mt6785 |
| mediatek | mt6785t |
| mediatek | mt6785u |
| mediatek | mt6789 |
| mediatek | mt6833p |
| mediatek | mt6835 |
| mediatek | mt6835t |
| mediatek | mt6853 |
| mediatek | mt6853t |
| mediatek | mt6855 |
| mediatek | mt6855t |
| mediatek | mt6873 |
| mediatek | mt6875 |
| mediatek | mt6875t |
| mediatek | mt6877 |
| mediatek | mt6877t |
| mediatek | mt6877tt |
| mediatek | mt6878 |
| mediatek | mt6878m |
| mediatek | mt6879 |
| mediatek | mt6880 |
| mediatek | mt6880t |
| mediatek | mt6880u |
| mediatek | mt6883 |
| mediatek | mt6885 |
| mediatek | mt6886 |
| mediatek | mt6889 |
| mediatek | mt6890 |
| mediatek | mt6891 |
| mediatek | mt6893 |
| mediatek | mt6895 |
| mediatek | mt6895tt |
| mediatek | mt6896 |
| mediatek | mt6897 |
| mediatek | mt6899 |
| mediatek | mt6980 |
| mediatek | mt6980d |
| mediatek | mt6983t |
| mediatek | mt6985 |
| mediatek | mt6985t |
| mediatek | mt6989 |
| mediatek | mt6989t |
| mediatek | mt6990 |
| mediatek | mt6991 |
| mediatek | mt8666 |
| mediatek | mt8673 |
| mediatek | mt8675 |
| mediatek | mt8676 |
| mediatek | mt8678 |
| mediatek | mt8765 |
| mediatek | mt8766 |
| mediatek | mt8768 |
| mediatek | mt8771 |
| mediatek | mt8781 |
| mediatek | mt8786 |
| mediatek | mt8788 |
| mediatek | mt8788e |
| mediatek | mt8789 |
| mediatek | mt8791t |
| mediatek | mt8795t |
| mediatek | mt8797 |
| mediatek | mt8798 |
| mediatek | mt8863 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-20149? +
How severe is CVE-2024-20149? +
What products are affected by CVE-2024-20149? +
How do I check if I'm vulnerable to CVE-2024-20149? +
Related Vulnerabilities
Incorrect authentication vulnerability in ParkingDoor. Through this vulnerability it is possible to operate the device without the access being logged …
A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows …
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access …
Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from …
N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors …