CVE-2024-20154
HIGHDescription
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00720348; Issue ID: MSV-2392.
Is your site exposed to CVE-2024-20154?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| mediatek | lr12a |
| mediatek | lr13 |
| mediatek | nr16.r1.mp |
| mediatek | nr16.r1.mp1mp2.mp |
| mediatek | nr16.r2.mp |
| mediatek | mt2735 |
| mediatek | mt6767 |
| mediatek | mt6768 |
| mediatek | mt6769 |
| mediatek | mt6769k |
| mediatek | mt6769s |
| mediatek | mt6769t |
| mediatek | mt6769z |
| mediatek | mt6779 |
| mediatek | mt6781 |
| mediatek | mt6783 |
| mediatek | mt6785 |
| mediatek | mt6785t |
| mediatek | mt6785u |
| mediatek | mt6789 |
| mediatek | mt6833p |
| mediatek | mt6853 |
| mediatek | mt6853t |
| mediatek | mt6855 |
| mediatek | mt6855t |
| mediatek | mt6873 |
| mediatek | mt6875 |
| mediatek | mt6875t |
| mediatek | mt6877 |
| mediatek | mt6877t |
| mediatek | mt6877tt |
| mediatek | mt6880 |
| mediatek | mt6880t |
| mediatek | mt6880u |
| mediatek | mt6883 |
| mediatek | mt6885 |
| mediatek | mt6889 |
| mediatek | mt6890 |
| mediatek | mt6891 |
| mediatek | mt6893 |
| mediatek | mt8666 |
| mediatek | mt8673 |
| mediatek | mt8675 |
| mediatek | mt8765 |
| mediatek | mt8766 |
| mediatek | mt8768 |
| mediatek | mt8771 |
| mediatek | mt8781 |
| mediatek | mt8786 |
| mediatek | mt8788 |
| mediatek | mt8788e |
| mediatek | mt8789 |
| mediatek | mt8791t |
| mediatek | mt8795t |
| mediatek | mt8797 |
| mediatek | mt8798 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-20154? +
How severe is CVE-2024-20154? +
What products are affected by CVE-2024-20154? +
How do I check if I'm vulnerable to CVE-2024-20154? +
Related Vulnerabilities
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to …
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …
editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have …
Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue
A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may …
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute …