9.8критическая
CVE-2024-20067
Описание
In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462.
Затрагиваемое ПО
Mediatek Nr16Mediatek Nr17Mediatek Mt6813Mediatek Mt6815Mediatek Mt6835Mediatek Mt6878Mediatek Mt6897Mediatek Mt6899Mediatek Mt6986Mediatek Mt6986dMediatek Mt6991Mediatek Mt8792
CVSS
| Балл | 9.8 — критическая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Источники
https://corp.mediatek.com/product-security-bulletin/June-2024https://corp.mediatek.com/product-security-bulletin/June-2024