CVE-2024-20147

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

n Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389046 (Note: For MT79XX chipsets) / ALPS09136501 (Note: For MT2737, MT3603, MT6XXX, and MT8XXX chipsets); Issue ID: MSV-1797.

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/February-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:linuxfoundation:yocto:3.3:::::::*
	cpe:2.3:a:linuxfoundation:yocto:4.0:::::::*
	cpe:2.3:a:linuxfoundation:yocto:5.0:::::::*
	cpe:2.3:a:mediatek:software_development_kit::::::::
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:google:android:15.0:::::::*
	cpe:2.3:o:openwrt:openwrt:23.05:::::::*

OR	cpe:2.3:h:mediatek:mt2737:-:::::::*
	cpe:2.3:h:mediatek:mt3603:-:::::::*
	cpe:2.3:h:mediatek:mt6835:-:::::::*
	cpe:2.3:h:mediatek:mt6878:-:::::::*
	cpe:2.3:h:mediatek:mt6886:-:::::::*
	cpe:2.3:h:mediatek:mt6897:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt7902:-:::::::*
	cpe:2.3:h:mediatek:mt7920:-:::::::*
	cpe:2.3:h:mediatek:mt7921:-:::::::*
	cpe:2.3:h:mediatek:mt7922:-:::::::*
	cpe:2.3:h:mediatek:mt7925:-:::::::*
	cpe:2.3:h:mediatek:mt7927:-:::::::*
	cpe:2.3:h:mediatek:mt8195:-:::::::*
	cpe:2.3:h:mediatek:mt8370:-:::::::*
	cpe:2.3:h:mediatek:mt8390:-:::::::*
	cpe:2.3:h:mediatek:mt8395:-:::::::*
	cpe:2.3:h:mediatek:mt8518s:-:::::::*
	cpe:2.3:h:mediatek:mt8532:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*

History

22 Apr 2025, 13:50

Type	Values Removed	Values Added
References	~~() https://corp.mediatek.com/product-security-bulletin/February-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/February-2025 - Vendor Advisory
CPE		cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt7902:-:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6897:-:::::::* cpe:2.3:a:linuxfoundation:yocto:5.0:::::::* cpe:2.3:h:mediatek:mt8390:-:::::::* cpe:2.3:h:mediatek:mt7922:-:::::::* cpe:2.3:h:mediatek:mt8532:-:::::::* cpe:2.3:h:mediatek:mt8395:-:::::::* cpe:2.3:h:mediatek:mt6878:-:::::::* cpe:2.3:h:mediatek:mt7920:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt3603:-:::::::* cpe:2.3:a:mediatek:software_development_kit:::::::: cpe:2.3:h:mediatek:mt2737:-:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:a:linuxfoundation:yocto:4.0:::::::* cpe:2.3:h:mediatek:mt7925:-:::::::* cpe:2.3:h:mediatek:mt8518s:-:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt6835:-:::::::* cpe:2.3:h:mediatek:mt7927:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:o:openwrt:openwrt:23.05:::::::* cpe:2.3:h:mediatek:mt7921:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt8370:-:::::::* cpe:2.3:a:linuxfoundation:yocto:3.3:::::::* cpe:2.3:o:google:android:15.0:::::::* cpe:2.3:h:mediatek:mt8195:-:::::::*
First Time		Mediatek mt8678 Mediatek mt6985 Mediatek mt6835 Mediatek mt3603 Mediatek mt8395 Mediatek software Development Kit Openwrt Mediatek mt7922 Mediatek mt6990 Mediatek mt7927 Mediatek mt8518s Mediatek mt6886 Mediatek mt8532 Mediatek mt7921 Openwrt openwrt Google android Mediatek mt6878 Mediatek mt6897 Mediatek mt7920 Mediatek mt8390 Mediatek mt2737 Linuxfoundation yocto Mediatek mt7925 Google Mediatek mt6989 Mediatek mt8195 Mediatek mt7902 Mediatek mt8370 Mediatek Linuxfoundation
Summary		(es) En Bluetooth FW, existe una posible afirmación de accesibilidad debido a una gestión inadecuada de excepciones. Esto podría provocar una denegación de servicio remota sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. ID de parche: WCNCR00389046 (Nota: para conjuntos de chips MT79XX) / ALPS09136501 (Nota: para conjuntos de chips MT2737, MT3603, MT6XXX y MT8XXX); ID de problema: MSV-1797.