CVE-2024-20154

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00720348; Issue ID: MSV-2392.

• CWE-121
• CWE-787

• https://corp.mediatek.com/product-security-bulletin/January-2025Vendor Advisory

Published

Jan 6, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20149In Modem, there is a possible system crash due to improper i…7.5
• CVE-2024-2015A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-20150In Modem, there is a possible system crash due to a logic er…7.5
• CVE-2024-20151In Modem, there is a possible out of bounds write due to an …6.7
• CVE-2024-20152In wlan STA driver, there is a possible reachable assertion …4.4
• CVE-2024-20153In wlan STA, there is a possible way to trick a client to co…7.5
• CVE-2024-2016A vulnerability, which was classified as critical, was found…8.8
• CVE-2024-2017The Countdown, Coming Soon, Maintenance – Countdown & Clock …5.4
• CVE-2024-2018The WP Activity Log Premium plugin for WordPress is vulnerab…8.8
• CVE-2024-2019The WP-DB-Table-Editor plugin for WordPress is vulnerable to…7.5
• CVE-2024-2020The Calculated Fields Form plugin for WordPress is vulnerabl…6.1
• CVE-2024-2021A vulnerability was found in Netentsec NS-ASG Application Se…9.8