CVE-2024-20139 — MediaTek, Inc. / MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678

CVE-2024-20139

MediaTek, Inc. / MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678 PUBLISHED

Description (CNA)

In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678	affected Android 13.0, 14.0, 15.0 / SDK release 3.3 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0

CWE

CWE-617

References

https://corp.mediatek.com/product-security-bulletin/December-2024

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.