Reachable Assertion in MediaTek products - CVE-2024-20152
Published: January 6, 2025
Vulnerability identifier: #VU102351
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20152
CWE-ID: CWE-617
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to perform service disruption.
The vulnerability exists due to improper exception handling within wlan. A local application can perform service disruption.
Affected software
MT8518S
MT8893
MT8798
MT8796
MT8781
MT8775
MT8768
MT8766
MT8755
MT8532
MT2737
MT7922
MT7920
MT7902
MT6990
MT6897
MT6886
MT6878
MT6835
MT3603
MT8893
MT8798
MT8796
MT8781
MT8775
MT8768
MT8766
MT8755
MT8532
MT2737
MT7922
MT7920
MT7902
MT6990
MT6897
MT6886
MT6878
MT6835
MT3603
How to mitigate CVE-2024-20152
Install security update from vendor's website.