CVE-2024-20101

The vulnerability results from inadequate input data validation in the WLAN driver (CWE-787 — out of bounds write). An attacker can send crafted network data that causes writes outside the designated memory area. Since the attack is possible over the network (AV:N), without required privileges (PR:N) and without user interaction (UI:N), the attack surface is very wide. Successful exploitation of the vulnerability can lead to device takeover.

An attacker can remotely execute arbitrary code on a vulnerable device, gaining full access to the confidentiality, integrity, and availability of the system (CVSS scores C:H/I:H/A:H).

The patch with identifier ALPS08998901 (Issue ID: MSV-1602) available from the manufacturer must be applied. Detailed information about versions containing the fix can be found in the MediaTek security bulletin: https://corp.mediatek.com/product-security-bulletin/October-2024

MediaTek SDK, Google Android (versions indicated in manufacturer references), and the MediaTek MT3605 chip — detailed versions available in the MediaTek security bulletin from October 2024.