{"id":"CVE-2024-20019","state":"PUBLISHED","title":"In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User int","description":"In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173.","publishedAt":"2024-03-04T02:43:27.661Z","updatedAt":"2024-08-01T21:52:31.569Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"MediaTek","products":["MediaTek, Inc. MT7925, MT7927"],"affected":[{"vendor":"MediaTek, Inc.","product":"MT7925, MT7927","versions":[{"version":"SW package release 2023.11.10 and before","status":"affected"}]}],"references":["https://corp.mediatek.com/product-security-bulletin/March-2024"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/20xxx/CVE-2024-20019.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-20019","state":"PUBLISHED","datePublished":"2024-03-04T02:43:27.661Z","dateUpdated":"2024-08-01T21:52:31.569Z","assignerShortName":"MediaTek","assignerOrgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateReserved":"2023-11-02T13:35:35.150Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173."}],"affected":[{"vendor":"MediaTek, Inc.","product":"MT7925, MT7927","versions":[{"version":"SW package release 2023.11.10 and before","status":"affected"}]}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/March-2024"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Denial of Service"}]}],"providerMetadata":{"shortName":"MediaTek","orgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateUpdated":"2024-03-04T02:43:27.661Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"mediatek","product":"mt7927","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"2023.11.10","versionType":"custom"}],"cpes":["cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*"]},{"vendor":"mediatek","product":"mt7925","defaultStatus":"unknown","versions":[{"version":"-0","status":"affected","lessThan":"2023.11.10","versionType":"custom"}],"cpes":["cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-03-04T14:17:28.244767Z","id":"CVE-2024-20019","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-23T18:26:39.751Z"}},{"title":"CVE Program Container","references":[{"url":"https://corp.mediatek.com/product-security-bulletin/March-2024","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T21:52:31.569Z"}}]}}}