Out-of-bounds write in MediaTek products - CVE-2024-20148

Vulnerability identifier: #VU102346

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20148

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper input validation within wlan. A remote attacker can trick the victim to open a specially crafted file and execute arbitrary code.

MT3603
MT6835
MT6878
MT6886
MT6897
MT7902
MT7920
MT7922
MT8532
MT8766
MT8768
MT8775
MT8796
MT8798
Samsung Mobile Firmware
MT8518S
Legion 5 15APH9
IdeaPad Slim 3 15IRU10
IdeaPad Slim 3 16AHP10
IdeaPad Slim 3 16IRH10
IdeaPad Slim 3 16IRH10R
IdeaPad Slim 5 13ARP10
IdeaPad Slim 5 14AHP10
IdeaPad Slim 5 14AHP9
IdeaPad Slim 5 15ARP10
IdeaPad Slim 5 16AHP10
IdeaPad Slim 5 16AHP9
IdeaPad Slim 3 15IRH10R
Legion 5 15ARP8
Legion 7 16IRX9
Legion 9 16IRX9
Legion Go S 8APU1
Legion Go S 8ARP1
Legion Pro 7 16ARX8H
Legion S7 16APH8
Legion Slim 5 14APH8
Legion Slim 5 16AHP9
Legion Slim 5 16APH8
IdeaPad 5 2-in-1 16AHP9
ThinkCentre Neo 30a 22 Gen 4
ThinkCentre Neo 30a 24 Gen 4
ThinkCentre Neo 30a 27 Gen 4
ThinkCentre Neo 70t Gen 3
Lenovo A100
Lenovo V100
Yoga AIO 7 27APH8
Lenovo 13w Yoga Gen 2 82YR
Lenovo 13w Yoga Gen 2 82YS
IdeaPad 5 2-in-1 14AHP9
Legion Slim 5 16ARP9
IdeaPad Pro 5 14AHP9
IdeaPad Pro 5 16AHP9
IdeaPad Pro 5 16APH8
IdeaPad Slim 3 14AHP10
IdeaPad Slim 3 14IRH10
IdeaPad Slim 3 14IRH10R
IdeaPad Slim 3 14IRU10
IdeaPad Slim 3 15AHP10
IdeaPad Slim 3 15IRH10
ThinkPad X13 Gen 3 21CM
ThinkPad P14s Gen 3 21J5
ThinkPad P14s Gen 3 21J6
ThinkPad P16s Gen 1 21CK
ThinkPad P16s Gen 1 21CL
ThinkPad T14 Gen 3 21CF
ThinkPad T14 Gen 3 21CG
ThinkPad T14s Gen 3 21CQ
ThinkPad T14s Gen 3 21CR
ThinkPad T16 Gen 1 21CH
ThinkPad T16 Gen 1 21CJ
ThinkPad E15 Gen 4 21EE
ThinkPad X13 Gen 3 21CN
ThinkPad Z13 Gen 1 21D2
ThinkPad Z13 Gen 1 21D3
ThinkPad Z16 Gen 1 21D4
ThinkPad Z16 Gen 1 21D5
ThinkStation P340 Workstation
ThinkStation P348 Workstation
ThinkStation P350 Workstation
ThinkStation P360 Workstation
ThinkBook 16 G7 ARP
Lenovo Slim Pro 7 14APH8
Lenovo V14 G4 ABP
Lenovo V15 G4 ABP
LOQ 15AHP9
LOQ 15APH8
LOQ 15ARP9
LOQ 16APH8
ThinkBook 14 G6 ABP
ThinkBook 14 G7 ARP
ThinkBook 16 G6 ABP
ThinkCentre M90t Gen 3
ThinkBook 16 G7+ ASP
Yoga 7 2-in-1 14AHP9
Yoga 7 2-in-1 16AHP9
Yoga Pro 7 14AHP9
Yoga Pro 7 14APH8
Yoga Pro 7 14ASP9
ThinkPad E14 Gen 4 21EB
ThinkPad E14 Gen 4 21EC
ThinkPad E15 Gen 4 21ED
ThinkCentre M75t Gen 2 11RE
ThinkCentre M75q Gen 5
ThinkCentre M75s Gen 2 11R7
ThinkCentre M75s Gen 2 11R8
ThinkCentre M75s Gen 2 11R9
ThinkCentre M75s Gen 2 11RA
ThinkCentre M75s Gen 2
ThinkCentre M75s Gen 5
ThinkCentre M75t Gen 2 11RB
ThinkCentre M75t Gen 2 11RC
ThinkCentre M75t Gen 2 11RD
ThinkCentre M75q Gen 2 11JS
ThinkCentre M75t Gen 2
ThinkCentre M75t Gen 5
ThinkCentre M80q Gen 3
ThinkCentre M80s Gen 3
ThinkCentre M80t Gen 3
ThinkCentre M90a Gen 3
ThinkCentre M90a Gen 3 Pro
ThinkCentre M90q Gen 3
ThinkCentre M90s Gen 3
IdeaCentre AIO 3 24ARR9
IdeaCentre AIO 3 27ARR9
Legion T7 34IAS10
ThinkCentre M70a Gen 3
ThinkCentre M75q Gen 2 11JN
ThinkCentre M75q Gen 2 11JQ
ThinkCentre M75q Gen 2 11JR
MediaTek Wireless LAN Driver for Windows 11 64-bit (Version 21H2 or Later) - Lenovo A100, Lenovo V100
MTK7921 Wireless LAN Driver for Windows 11 (Version 21H2 or Later), 10 (64-bit) - ThinkCentre M90a Gen 3
MediaTek RZ616 Wireless LAN Driver for Windows 11 (Version 21H2 or Later), 10 (64-bit) - ThinkCentre M90a Pro Gen 3
MTK7921 Wireless LAN Driver for Windows 11 (Version 21H2 or Later), 10 (64-bit) - ThinkCentre M90a Pro Gen 3
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M90q Gen 3
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkCentre M90q Gen 3
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M90s Gen 3, M90t Gen 3
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkCentre M90s Gen 3, M90t Gen 3
MTK WLAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre Neo 30a 22 Gen 4, Neo 30a 24 Gen 4, Neo 30a 27 Gen 4
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre Neo 70t Gen 3
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkCentre Neo 70t Gen 3
MediaTek RZ616 Wireless LAN Driver for Windows 10 (64-bit), 11 (Version 21H2 or Later) - ThinkCentre M90a Gen 3
MediaTek WLAN Driver for Windows 11 64-bit (Version 21H2 or Later) - Yoga AIO 7 27APH8
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad 5 2-in-1 14AHP9, IdeaPad 5 2-in-1 16AHP9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Pro 5 14AHP9
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - IdeaPad Pro 5 16AHP9
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) -IdeaPad Pro 5 16APH8
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Slim 5 14AHP10, IdeaPad Slim 5 16AHP10
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion 5 15APH9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion 5 15ARP8
WLAN Driver (Intel, Mediatek) for Windows 11 (64-bit) - Legion 9 16IRX9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion Pro 7 16ARX8H
Mediatek Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M75t Gen 2, M75s Gen 2
Realtek Wireless LAN Driver for Windows 11 64-bit (Version 21H2 or Later) - IdeaCentre AIO 24ARR9, AIO 27ARR9
MTK MT7925 Wireless LAN Driver for Windows 11 64-bit (Version 21H2 or Later) - Legion T7 34IAS10
MediaTek RZ616 Wireless LAN Driver for Windows 10 (64-bit), 11 (Version 21H2 or later) - ThinkCentre M70a Gen 3
MTK7921 Wireless LAN Driver for Windows 10 (64-bit), 11 (Version 21H2 or later) - ThinkCentre M70a Gen 3
MTK MT7921 WLAN Driver for Windows 10 (Version 20H2) - ThinkCentre M75q Gen 2 (Type 11JN, 11JQ, 11JR, 11JS)
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M75q Gen 5
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre M75q Gen 5
MTK Wireless LAN Driver for Windows 11 IOT (Version 24H2) - ThinkCentre M75s Gen 5, M75t Gen 5
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre M75t Gen 2, M75s Gen 2
MTK WLAN Driver for Windows 10 (64-bit) - ThinkCentre M75t Gen 2, M75s Gen 2
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion S5 14APH8
MTK WLAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre M75t Gen 2, M75s Gen 2
MTK Wireless LAN Driver for Windows 10 64-bit - ThinkCentre M75t Gen 5, M75s Gen 5
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre M75s Gen 5
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or Later) - ThinkCentre M75t Gen 5
Mediatek Wireless LAN Driver for Windows 10 (64-bit) IOT - Desktop, Workstation
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M80q Gen 3
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkCentre M80q Gen 3
MTK Wireless LAN Driver for Windows 10 (64-bit) - ThinkCentre M80s Gen 3, M80t Gen 3
MTK Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkCentre M80s Gen 3, M80t Gen 3
MTK WiFi Driver for Windows 10 (Version 21H2) - ThinkStation P348
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Yoga Pro 7 14APH8, Lenovo Slim Pro 7 14APH8
WLAN Driver (Mediatek, Realtek) for Windows 10 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 16 G6 ABP
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 16 G6 ABP
WLAN Driver (Realtek, Mediatek) for Windows 10 (64-bit) - ThinkBook 14 G7 ARP, ThinkBook 16 G7 ARP
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - ThinkBook 14 G7 ARP, ThinkBook 16 G7 ARP
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Yoga 7 2-in-1 14AHP9, Yoga 7 2-in-1 16AHP9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Yoga Pro 7 14AHP9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Yoga Pro 7 14ASP9
MediaTek MT7921 Wireless LAN Driver for Windows 10 (Version 21H2) - ThinkStation P340
MediaTek MT7921 Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkStation P340
MediaTek Wireless LAN Driver for Windows 11 64-bit (Version 21H2 or Later) - IdeaCentre AIO 24ARR9, AIO 27ARR9
MTK WiFi Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P348
Mediatek MT7921 Wireless LAN Driver for Windows 11 (Version 21H2 or later) and 10 (Version 20H2) - ThinkStation P350
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Slim 3 14AHP10,IdeaPad Slim 3 15AHP10,IdeaPad Slim 3 16AHP10
WLAN Driver (Realtek, Mediatek, Intel) for Windows 11 (64-bit) - IdeaPad Slim 3 14 15 16 Series
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Lenovo V14 G4 ABP, Lenovo V15 G4 ABP
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion 7 16IRX9
Mediatek WLAN Driver for Windows 11 (64-bit) - ThinkBook 16 G7+ ASP
Mediatek WLAN Driver for Windows 11 (64-bit) - Legion Go S 8ARP1, Legion Go S 8APU1
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - Legion Slim 5 16ARP9
RZ616 Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5)
Mediatek Wireless LAN Software for Windows 10 (Version 20H2 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5)
RZ616 Wireless LAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad
RZ616 WLAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 21H2 or later) - ThinkPad E14 Gen 4, E15 Gen 4
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15ARP9
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15APH8, LOQ 16APH8
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15AHP9
Wireless Driver for Windows 10 64-bit (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS)
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion Slim 5 16APH8
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - Legion Slim 5 16AHP9
Mediatek WLAN Driver for Windows 11 (64-bit) - Legion S7 16APH8
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Slim 5 14AHP9, IdeaPad Slim 5 16AHP9
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - IdeaPad Slim 5 13ARP10, IdeaPad Slim 5 15ARP10
Wireless Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS)
Google Android

Install security update from vendor's website.

Samsung Mobile Firmware - update to SMR-FEB-2025
Google Android - addressed in versions 12L 2025-01-05, 12 2025-01-05, 13 2025-01-05, 14 2025-01-05, 15 2025-01-05
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Slim 3 14AHP10,IdeaPad Slim 3 15AHP10,IdeaPad Slim 3 16AHP10 - update to 24.20.3.37
WLAN Driver (Realtek, Mediatek, Intel) for Windows 11 (64-bit) - IdeaPad Slim 3 14 15 16 Series - update to 24.20.3.37
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Lenovo V14 G4 ABP, Lenovo V15 G4 ABP - update to 24.34.2.570
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion 7 16IRX9 - update to 25.20.3.47
Mediatek WLAN Driver for Windows 11 (64-bit) - ThinkBook 16 G7+ ASP - update to 25.20.3.47
Mediatek WLAN Driver for Windows 11 (64-bit) - Legion Go S 8ARP1, Legion Go S 8APU1 - update to 25.40.2.577
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - Legion Slim 5 16ARP9 - update to 25.40.2.579
RZ616 Wireless LAN Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5) - update to 25.40.2.579
Mediatek Wireless LAN Software for Windows 10 (Version 20H2 or later) - ThinkPad Z13 (Type 21D2, 21D3), Z16 (Type 21D4, 21D5) - update to 25.40.2.579
RZ616 Wireless LAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad - update to 25.40.2.579
RZ616 WLAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 21H2 or later) - ThinkPad E14 Gen 4, E15 Gen 4 - update to 25.40.2.579
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15ARP9 - update to 25.40.2.579
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15APH8, LOQ 16APH8 - update to 25.40.2.579
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - LOQ 15AHP9 - update to 25.40.2.579
Wireless Driver for Windows 10 64-bit (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) - update to 25.40.2.579
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - Legion Slim 5 16APH8 - update to 25.40.2.579
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - Legion Slim 5 16AHP9 - update to 25.40.2.579
Mediatek WLAN Driver for Windows 11 (64-bit) - Legion S7 16APH8 - update to 25.40.2.579
WLAN Driver (Realtek, Mediatek) for Windows 11 (64-bit) - IdeaPad Slim 5 14AHP9, IdeaPad Slim 5 16AHP9 - update to 25.40.2.579
WLAN Driver (Mediatek, Realtek) for Windows 11 (64-bit) - IdeaPad Slim 5 13ARP10, IdeaPad Slim 5 15ARP10 - update to 25.40.2.579
Wireless Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) - update to 25.40.2.579

• https://corp.mediatek.com/product-security-bulletin/January-2025

• Multiple vulnerabilities in MediaTek chipsets
• Multiple vulnerabilities in Google Android
• Out-of-bounds write in Leovo MediaTek WLAN driver
• Multiple vulnerabilities in Samsung Mobile Firmware (February 2025)