SB2024030403 - Multiple vulnerabilities in MediaTek chipsets

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024030403

SB2024030403 - Multiple vulnerabilities in MediaTek chipsets

Published: March 4, 2024 Updated: August 30, 2024

Security Bulletin ID SB2024030403
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 21
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 21 vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2024-20028)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to lack of valudation within da. A local privileged application can execute arbitrary code.


2) Out-of-bounds read (CVE-ID: CVE-2024-20038)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to an incorrect bounds check within pq. A local privileged application can gain access to sensitive information.


3) Write-what-where Condition (CVE-ID: CVE-2024-20037)

CWE-ID: CWE-123 - Write-what-where Condition

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within pq. A local privileged application can execute arbitrary code.


4) Improper Access Control (CVE-ID: CVE-2024-20036)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to a permissions bypass within vdec. A local privileged application can gain access to sensitive information.


5) Out-of-bounds write (CVE-ID: CVE-2024-20034)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to a missing bounds check within battery. A local privileged application can execute arbitrary code.


6) Out-of-bounds read (CVE-ID: CVE-2024-20033)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to a missing bounds check within nvram. A local privileged application can gain access to sensitive information.


7) Improper Privilege Management (CVE-ID: CVE-2024-20032)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to a missing permission check within aee. A local privileged application can execute arbitrary code.


8) Improper input validation (CVE-ID: CVE-2024-20029)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to improper input validation within wlan firmware. A local privileged application can execute arbitrary code.


9) Improper input validation (CVE-ID: CVE-2024-20031)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to lack of valudation within da. A local privileged application can execute arbitrary code.


10) Improper input validation (CVE-ID: CVE-2024-20030)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to improper input validation within da. A local privileged application can gain access to sensitive information.


11) Improper input validation (CVE-ID: CVE-2024-20027)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to improper input validation within da. A local privileged application can execute arbitrary code.


12) Improper input validation (CVE-ID: CVE-2024-20017)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear


The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation within wlan service. A local application can execute arbitrary code.


13) Out-of-bounds read (CVE-ID: CVE-2024-20026)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to improper input validation within da. A local privileged application can gain access to sensitive information.


14) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2024-20025)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to an integer overflow within da. A local privileged application can execute arbitrary code.


15) Out-of-bounds write (CVE-ID: CVE-2024-20024)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to lack of valudation within flashc. A local privileged application can execute arbitrary code.


16) Out-of-bounds write (CVE-ID: CVE-2024-20023)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to lack of valudation within flashc. A local privileged application can execute arbitrary code.


17) Improper Privilege Management (CVE-ID: CVE-2024-20022)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to a missing bounds check within lk. A local privileged application can execute arbitrary code.


18) Improper Access Control (CVE-ID: CVE-2024-20005)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to a missing permission check within da. A local privileged application can execute arbitrary code.


19) Missing release of memory after effective lifetime (CVE-ID: CVE-2024-20019)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to improper input handling within wlan driver. A local application can perform service disruption.


20) Improper input validation (CVE-ID: CVE-2024-20018)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation within wlan driver. A local application can execute arbitrary code.


21) Out-of-bounds write (CVE-ID: CVE-2024-20020)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local privileged application to gain access to sensitive information.

The vulnerability exists due to an incorrect bounds check within OPTEE. A local privileged application can gain access to sensitive information.


Remediation

Install update from vendor's website.

References