MediaTek chipsets: wlan service out of bounds write (CVE-2024-20017) #shorts #breaking

CVE

This CVE involves a serious vulnerability in the WLAN service of specific MediaTek chipsets such as MT6890, MT7915, MT7916, MT7981, and MT7986. The flaw stems from improper input validation, leading to a risky condition known as an out of bounds write. This issue can potentially enable attackers to execute code remotely on affected devices without requiring any elevated privileges or user interaction. Although several methods exist to exploit this vulnerability, no specific incidents of exploitations have been recorded. Users relying on MediaTek components in their devices, particularly those using certain SDK and OpenWrt versions, should remain aware of this vulnerability.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://corp.mediatek.com/product-security-bulletin/March-2024