CVE-2024-20148

In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID: MSV-1796.

• CWE-787
• CWE-787

• https://corp.mediatek.com/product-security-bulletin/January-2025Vendor Advisory

Published

Jan 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20142In V5 DA, there is a possible out of bounds write due to a m…6.6
• CVE-2024-20143In V6 DA, there is a possible out of bounds write due to a m…6.6
• CVE-2024-20144In V6 DA, there is a possible out of bounds write due to a m…6.6
• CVE-2024-20145In V6 DA, there is a possible out of bounds write due to a m…6.6
• CVE-2024-20146In wlan STA driver, there is a possible out of bounds write …8.1
• CVE-2024-20147In Bluetooth FW, there is a possible reachable assertion due…5.3
• CVE-2024-20149In Modem, there is a possible system crash due to improper i…7.5
• CVE-2024-2015A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-20150In Modem, there is a possible system crash due to a logic er…7.5
• CVE-2024-20151In Modem, there is a possible out of bounds write due to an …6.7
• CVE-2024-20152In wlan STA driver, there is a possible reachable assertion …4.4
• CVE-2024-20153In wlan STA, there is a possible way to trick a client to co…7.5