Rdk B
CVE-2024-20136
MEDIUM
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (mediatek) · only source for this CVE.
CVSS VectorVendor: mediatek
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.
AnalysisAI
In da, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821. Affected products include: Rdkcentral Rdk-B, Google Android, Openwrt.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.
In gnss service, there is a possible escalation of privilege due to improper certificate validation. Rated critical seve
In wlan firmware, there is a possible out of bounds write due to improper input validation. Rated high severity (CVSS 8.
In da, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.4), this vulne
In flashc, there is a possible out of bounds write due to an uncaught exception. Rated high severity (CVSS 8.4), this vu
In wlan, there is a possible denial of service due to incorrect error handling. Rated high severity (CVSS 7.5), this vul
In DA, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.8), this vul
In da, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.8), this vul
In gnss service, there is a possible out of bounds write due to improper input validation. Rated medium severity (CVSS 6
In preloader, there is a possible escalation of privilege due to an insecure default value. Rated medium severity (CVSS
In flashc, there is a possible out of bounds write due to lack of valudation. Rated medium severity (CVSS 6.7), this vul
In da, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vul
In aee, there is a possible escalation of privilege due to a missing permission check. Rated medium severity (CVSS 6.7),
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today