High severity · published Oct 7, 2024
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check
7.5
CVSS
0.8%
EPSS
No
On KEV
Description
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
NR
Nr15 · Mediatek
All versions, or not specified · source: NVD
MT
Mt2735 · Mediatek
0 · source: CISA
MT
Mt6833 · Mediatek
0 · source: CISA
MT
Mt6853 · Mediatek
0 · source: CISA
MT
Mt6855 · Mediatek
0 · source: CISA
MT
Mt6873 · Mediatek
0 · source: CISA
MT
Mt6875 · Mediatek
0 · source: CISA
MT
Mt6875t · Mediatek
0 · source: CISA
MT
Mt6877 · Mediatek
0 · source: CISA
MT
Mt6880 · Mediatek
0 · source: CISA
MT
Mt6883 · Mediatek
0 · source: CISA
Affected product
MM
MT2735, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797
MediaTek, Inc.