Skip to main content

Nr16 CVE-2024-20132

MEDIUM
Out-of-bounds Write (CWE-787)
2024-12-02 security@mediatek.com
Privilege Escalation Buffer Overflow Memory Corruption Nr16
6.7
CVSS 3.1 · Vendor: mediatek
Share

Severity by source

Vendor (mediatek) PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mediatek) · only source for this CVE.

CVSS VectorVendor: mediatek

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 02, 2024 - 04:15 cve.org
MEDIUM 6.7

DescriptionCVE.org

In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872.

AnalysisAI

In Modem, there is a possible out of bonds write due to a mission bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872. Affected products include: Mediatek Nr16.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

More in Nr16

View all
CVE-2023-32874 CRITICAL
9.8 Jan 02

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS
CVE-2024-20082 CRITICAL
9.8 Aug 14

In Modem, there is a possible memory corruption due to a missing bounds check. Rated critical severity (CVSS 9.8), this

CVE-2024-20067 CRITICAL
9.8 Jun 03

In modem, there is a possible out of bounds write due to improper input invalidation. Rated critical severity (CVSS 9.8)
CVE-2023-20819 CRITICAL
9.8 Oct 02

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CV
CVE-2022-21744 CRITICAL
9.8 Jul 06

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS 9.8
CVE-2022-20083 CRITICAL
9.8 Jul 06

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS

CVE-2024-20039 HIGH
8.8 Apr 01

In modem protocol, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8)
CVE-2023-32888 HIGH
7.5 Jan 02

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7
CVE-2023-32887 HIGH
7.5 Jan 02

In Modem IMS Stack, there is a possible system crash due to a missing bounds check. Rated high severity (CVSS 7.5), this
CVE-2023-32886 HIGH
7.5 Jan 02

In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.
CVE-2025-20667 HIGH
7.5 May 05

In Modem, there is a possible information disclosure due to incorrect error handling. Rated high severity (CVSS 7.5), th
CVE-2023-32890 HIGH
7.5 Jan 02

In modem EMM, there is a possible system crash due to improper input validation. Rated high severity (CVSS 7.5), this vu

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-20132 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy