MediaTek MT8676 V6 DA out-of-bounds write

Summaryinfo

A vulnerability, which was classified as critical, has been found in MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6880, MT6885, MT6886, MT6890, MT6893, MT6895, MT6897, MT6980, MT6985, MT6989, MT6990, MT8370, MT8390 and MT8676. This vulnerability affects unknown code of the component V6 DA. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2024-20144. It is possible to launch the attack on the physical device. There is no exploit available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability was found in MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6880, MT6885, MT6886, MT6890, MT6893, MT6895, MT6897, MT6980, MT6985, MT6989, MT6990, MT8370, MT8390 and MT8676. It has been rated as critical. This issue affects an unknown functionality of the component V6 DA. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09167056; Issue ID: MSV-2041.

The advisory is shared at corp.mediatek.com. The identification of this vulnerability is CVE-2024-20144 since 11/02/2023. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.

Applying the patch ALPS09167056 is able to eliminate this problem.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Chip Software

Vendor

• MediaTek

Name

• MT2737
• MT6739
• MT6761
• MT6765
• MT6768
• MT6771
• MT6779
• MT6781
• MT6785
• MT6789
• MT6833
• MT6835
• MT6853
• MT6855
• MT6873
• MT6877
• MT6878
• MT6879
• MT6880
• MT6885
• MT6886
• MT6890
• MT6893
• MT6895
• MT6897
• MT6980
• MT6985
• MT6989
• MT6990
• MT8370
• MT8390
• MT8676

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion