In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132.
CVE-2024-20017
CVSS base score
9.8 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-20, CWE-787
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
mediatek software development kit
openwrt openwrt
References
- corp.mediatek.com Vendor Advisory
- blog.coffinsec.com Exploit, Technical Description, Third Party Advisory
- blog.sonicwall.com Exploit, Third Party Advisory
- corp.mediatek.com Vendor Advisory
- news.ycombinator.com Third Party Advisory